45 matches found
al-for-design (0.0.1), autogluon (>=0.0.5, <=0.1.0b20210209) +48 more potentially affected by CVE-2026-59205 via pillow (6.2.1)
pillow PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - al-for-design 0.0.1 - autogluon =0.0.5, =0.0.15b20201014, =0.0.15b20201024, =0.0.16b20210114, =0.0.15b20201024, =0.0.121, =0.0.1, =0.0.1, =0.0.1,...
al-for-design (0.0.1), autogluon (>=0.0.5, <=0.1.0b20210209) +48 more potentially affected by CVE-2026-59199 via pillow (6.2.1)
pillow PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - al-for-design 0.0.1 - autogluon =0.0.5, =0.0.15b20201014, =0.0.15b20201024, =0.0.16b20210114, =0.0.15b20201024, =0.0.121, =0.0.1, =0.0.1, =0.0.1,...
sockeye (>=1.0.3, <=1.8.3) potentially affected by CVE-2022-24294 via mxnet (0.10.0)
mxnet PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - sockeye =1.0.3, =1.8.3 Source cves: CVE-2022-24294 Source advisory: OSV:PYSEC-2026-850...
h3mlcore (0.7.0.dev0) potentially affected by CVE-2022-24294 via mxnet (0.11.0)
mxnet PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - h3mlcore 0.7.0.dev0 Source cves: CVE-2022-24294 Source advisory: OSV:PYSEC-2026-850...
autonml (>=0.2.2, <=0.3.3), bert-embedding (>=0.1.0.dev1549697125, <=1.0.1) +23 more potentially affected by CVE-2022-24294 via mxnet (>=1.0.0, <=1.8.0.post0)
mxnet PYPI version =1.0.0, =0.2.2, =0.1.0.dev1549697125, =0.1.1, =0.1.0, =0.0.9, =0.0.6, =0.1.25.dev1535232511, =0.1.2, =0.0.2, =0.0.1, =0.1.0rc0, =0.1.0rc2 and more Source cves: CVE-2022-24294 Source advisory: OSV:PYSEC-2026-850...
h3mlcore (0.81.0.dev0) potentially affected by CVE-2022-24294 via mxnet (0.12.0)
mxnet PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - h3mlcore 0.81.0.dev0 Source cves: CVE-2022-24294 Source advisory: OSV:PYSEC-2026-850...
sockeye (>=1.13.0, <=1.15.8) potentially affected by CVE-2022-24294 via mxnet (0.12.1)
mxnet PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - sockeye =1.13.0, =1.15.8 Source cves: CVE-2022-24294 Source advisory: OSV:PYSEC-2026-850...
PYSEC-2026-850 Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption
A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...
Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption
A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...
EUVD-2018-11900
Malware in sbrugna...
EUVD-2022-6456
Malicious code in bioql PyPI...
CVE-2022-24294
A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...
BIT-MXNET-2022-24294
A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...
Apache MXNet Resource Consumption
The vulnerability of the Apache MXNet software environment for training and deploying deep neural networks is related to an uncontrolled resource consumption during the loading of models with operator names. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Regular Expression Denial Of Service (ReDoS)
mxnet is vulnerable to regular expression denial of service. The vulnerability exists in getkernel function of rtc.py due to improper handling of regular expressions which allows an attacker to send a specially crafted operator name causing a excessive resource consumption which then leads to an...
GHSA-XXJ3-55P6-XG3H Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption
A regular expression used in Apache MXNet incubating is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to u...
sockeye (>=1.0.3, <=1.8.3) potentially affected by CVE-2022-24294 via mxnet (0.10.0)
mxnet PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - sockeye =1.0.3, =1.8.3 Source cves: CVE-2022-24294 Source advisory: OSV:GHSA-XXJ3-55P6-XG3H...
h3mlcore (0.7.0.dev0) potentially affected by CVE-2022-24294 via mxnet (0.11.0)
mxnet PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - h3mlcore 0.7.0.dev0 Source cves: CVE-2022-24294 Source advisory: OSV:GHSA-XXJ3-55P6-XG3H...
h3mlcore (0.81.0.dev0) potentially affected by CVE-2022-24294 via mxnet (0.12.0)
mxnet PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - h3mlcore 0.81.0.dev0 Source cves: CVE-2022-24294 Source advisory: OSV:GHSA-XXJ3-55P6-XG3H...
sockeye (>=1.13.0, <=1.15.8) potentially affected by CVE-2022-24294 via mxnet (0.12.1)
mxnet PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - sockeye =1.13.0, =1.15.8 Source cves: CVE-2022-24294 Source advisory: OSV:GHSA-XXJ3-55P6-XG3H...