EUVD-2023-37207

Malicious code in bioql PyPI...

The software environment for training and deploying deep neural networks, Apache MXNet, has vulnerabilities related to uncontrolled resource consumption. This allows attackers to trigger service failures.

The vulnerability of the Apache MXNet software environment for training and deploying deep neural networks is related to an uncontrolled resource consumption during the loading of models with operator names. Exploiting this vulnerability could allow a malicious actor to cause service failures...