Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2024/09/12 3:33 p.m.•31 views

Refuel Autolab Eval Injection vulnerability

An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python...

7.8CVSS6.4AI score0.00349EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2024/09/12 3:33 p.m.•42 views

GHSA-4FGP-7VVM-M4JF Refuel Autolab Eval Injection vulnerability

An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python...

8.6CVSS6.4AI score0.00349EPSS
SaveExploits0References4
osv_ghsa
osv_ghsa
•added 2024/09/12 3:33 p.m.•83 views

GHSA-G2M8-F3X2-QPRW Refuel Autolab Eval Injection vulnerability

An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classification tasks handle provided CSV files. If a victim user creates a classification task using a maliciously crafted CSV file containing Python code, the code...

8.6CVSS6.3AI score0.00352EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/09/12 3:33 p.m.•41 views

Refuel Autolab Eval Injection vulnerability

An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classification tasks handle provided CSV files. If a victim user creates a classification task using a maliciously crafted CSV file containing Python code, the code...

7.8CVSS6.3AI score0.00352EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder