CVE-2021-43811

CVE-2021-43811 awslabs/sockeye Code injection via unsafe YAML loading CVE-2021-43811 NVD Description Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 us...

sockeye (>=1.0.3, <=1.8.3) potentially affected by CVE-2022-24294 via mxnet (0.10.0)

mxnet PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - sockeye =1.0.3, =1.8.3 Source cves: CVE-2022-24294 Source advisory: OSV:PYSEC-2026-850...

sockeye (>=1.13.0, <=1.15.8) potentially affected by CVE-2022-24294 via mxnet (0.12.1)

mxnet PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - sockeye =1.13.0, =1.15.8 Source cves: CVE-2022-24294 Source advisory: OSV:PYSEC-2026-850...

EUVD-2021-0247

Malware in sbrugna...

CVE-2021-43811

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...

sockeye (>=1.0.3, <=1.8.3) potentially affected by CVE-2022-24294 via mxnet (0.10.0)

mxnet PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - sockeye =1.0.3, =1.8.3 Source cves: CVE-2022-24294 Source advisory: OSV:GHSA-XXJ3-55P6-XG3H...

sockeye (>=1.13.0, <=1.15.8) potentially affected by CVE-2022-24294 via mxnet (0.12.1)

mxnet PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on mxnet and may be impacted: - sockeye =1.13.0, =1.15.8 Source cves: CVE-2022-24294 Source advisory: OSV:GHSA-XXJ3-55P6-XG3H...

Code injection via unsafe YAML loading

Impact Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An attacker can add malicious code to the config file of a trained model and attempt to convince users to...

GHSA-GGMR-44CV-24PM Code injection via unsafe YAML loading

Impact Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An attacker can add malicious code to the config file of a trained model and attempt to convince users to...

CVE-2021-43811

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...

CVE-2021-43811

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...

CVE-2021-43811

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...

PYSEC-2021-848

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...

PYSEC-2021-848

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...

Code injection

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...

CVE-2021-43811

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...

CVE-2021-43811

Sockeye (PyTorch-based) vulnerable to code execution via unsafe YAML loading in model/data config files when using versions below 2.3.24; an attacker can inject malicious config, which executes locally when a user runs the model. The issue is fixed in 2.3.24. Practical impact is limited to users ...

CVE-2021-43811 Code injection via unsafe YAML loading

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...

PT-2021-23951 · Sockeye · Sockeye

Name of the Vulnerable Software and Affected Versions: Sockeye versions prior to 2.3.24 Description: Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. It uses YAML to store model and data configurations on disk. The issue arises from unsafe...

Sockeye code injection vulnerability

Sockeye is an open source sequence-to-sequence framework for neural machine translation based on PyTorch. Sockeye suffers from a code injection vulnerability that stems from Sockeye's use of YAML to store model and data configurations on disk.Versions of Sockeye up to 2.3.24 are loaded using...