CVE-2026-112098

A security flaw exists in DeepPavlov up to version 1.7.0 within the Config Reference Resolver component. Specifically, the resolve function in the file deeppavlov/core/common/params.py is vulnerable to code injection due to improper input handling. This vulnerability can be exploited remotely , a...

EUVD-2026-104130

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...