PT-2024-16957 · Hugging Face · Huggingface/Transformers

Name of the Vulnerable Software and Affected Versions: Hugging Face Transformers affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this issue,...

CVE-2024-21799

Path traversal for some IntelR Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21799

Path traversal for some IntelR Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21799

Path traversal for some IntelR Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21799

CVE-2024-21799 affects Intel® Extension for Transformers software prior to 1.5. The vulnerability is a path traversal that may allow an authenticated user to escalate privileges via local access. Affected component: Intel Extension for Transformers (before version 1.5). Impact is described as pot...

CVE-2024-21799: Improper Limitation of a Pathname to a Restricted Directory

Path traversal for some IntelR Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-8767

Name of the Vulnerable Software and Affected Versions: IntelR Extension for Transformers versions prior to 1.5 Description: The issue is related to path traversal in the IntelR Extension for Transformers software, which may allow an authenticated user to potentially enable escalation of privilege...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-48052 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-48052 Source advisory: OSV:GHSA-3GF9-WV65-GWH9...

allennlp (>=1.0.0.dev20200427, <=1.0.0rc4.dev20200501), allennlp-models (1.0.0rc3) +42 more potentially affected by CVE-2024-48063 via torch (1.5.0)

torch PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - allennlp =1.0.0.dev20200427, =0.0.1, =0.0.2, =0.0.9, =0.0.14, =0.1.7, =0.0.6, =0.0.6, =0.0.1, =0.0.1, =0.0.3, =0.0.4 and more Source cves:...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47872 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47872 Source advisory: OSV:PYSEC-2024-220...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47871 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47871 Source advisory: OSV:PYSEC-2024-219...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47870 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47867 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47867 Source advisory: OSV:PYSEC-2024-216...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47868 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47868 Source advisory: OSV:PYSEC-2024-217...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47869 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47869 Source advisory: OSV:PYSEC-2024-199...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47167 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47167 Source advisory: OSV:PYSEC-2024-215...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47168 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47084 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47084 Source advisory: OSV:PYSEC-2024-196...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47165 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47166 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...