27 matches found
Refuel Autolab Eval Injection vulnerability
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classification tasks handle provided CSV files. If a victim user creates a classification task using a maliciously crafted CSV file containing Python code, the code...
Refuel Autolab Eval Injection vulnerability
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python...
PYSEC-2026-1869 Refuel Autolab Eval Injection vulnerability
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python...
PYSEC-2026-1870 Refuel Autolab Eval Injection vulnerability
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classification tasks handle provided CSV files. If a victim user creates a classification task using a maliciously crafted CSV file containing Python code, the code...
refuel-autolabel (0.0.16) potentially affected by CVE-2026-55443 via langchain (0.0.226)
langchain PYPI version 0.0.226 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - refuel-autolabel 0.0.16 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...
refuel-autolabel (>=0.0.5, <=0.0.15) potentially affected by CVE-2026-55443 via langchain (0.0.210)
langchain PYPI version 0.0.210 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - refuel-autolabel =0.0.5, =0.0.15 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...
refuel-autolabel (0.0.16) potentially affected by CVE-2026-55443 via langchain (0.0.226)
langchain PYPI version 0.0.226 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - refuel-autolabel 0.0.16 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...
refuel-autolabel (>=0.0.5, <=0.0.15) potentially affected by CVE-2026-55443 via langchain (0.0.210)
langchain PYPI version 0.0.210 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - refuel-autolabel =0.0.5, =0.0.15 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...
EUVD-2024-2709
Malicious code in bioql PyPI...
EUVD-2024-2786
Malicious code in bioql PyPI...
CVE-2024-27321
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python...
CVE-2024-27320
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classification tasks handle provided CSV files. If a victim user creates a classification task using a maliciously crafted CSV file containing Python code, the code...
CVE-2024-27321
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python...
CVE-2024-27321
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python...
CVE-2024-27320
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classification tasks handle provided CSV files. If a victim user creates a classification task using a maliciously crafted CSV file containing Python code, the code...
CVE-2024-27320
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classification tasks handle provided CSV files. If a victim user creates a classification task using a maliciously crafted CSV file containing Python code, the code...
CVE-2024-27321
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python...
CVE-2024-27321
CVE-2024-27321 affects Refuel Autolabel (versions 0.0.8 and newer). A multilabel classification task can process a malicious CSV that contains Python code, which is passed to eval and executed. The vulnerability enables arbitrary code execution with high impact (confidentiality, integrity, availa...
CVE-2024-27321
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python...
CVE-2024-27321
An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a maliciously crafted CSV file containing Python...