go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-4941 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-4941 Source advisory: OSV:PYSEC-2024-184...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-4253 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-4253 Source advisory: OSV:PYSEC-2024-321...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-1727 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-1727 Source advisory: OSV:GHSA-48CQ-79QQ-6F7X...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-34510 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-34511 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-34511 Source advisory: OSV:GHSA-34RF-P3R3-58X2...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-34510 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-34510 Source advisory: OSV:PYSEC-2024-255...

allennlp (>=1.0.0.dev20200427, <=1.0.0rc4.dev20200501), allennlp-models (1.0.0rc3) +42 more potentially affected by CVE-2024-31583 via torch (1.5.0)

torch PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - allennlp =1.0.0.dev20200427, =0.0.1, =0.0.2, =0.0.9, =0.0.14, =0.1.7, =0.0.6, =0.0.6, =0.0.1, =0.0.1, =0.0.3, =0.0.4 and more Source cves:...

3d-connectx-env (>=1.0.0, <=1.0.1), ai-traineree (>=0.1.2, <=0.4.2) +79 more potentially affected by CVE-2024-31580 via torch (1.9.1)

torch PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - 3d-connectx-env =1.0.0, =0.1.2, =2.5.1.dev20210621, =2.5.1.dev20210621, =0.1.0, =0.0.9, =0.1.0.dev2021118, =0.1.6, =0.1.7 - chatting-chatbots 0.0.1 an...

allennlp (>=1.0.0.dev20200427, <=1.0.0rc4.dev20200501), allennlp-models (1.0.0rc3) +42 more potentially affected by CVE-2024-31580 via torch (1.5.0)

torch PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - allennlp =1.0.0.dev20200427, =0.0.1, =0.0.2, =0.0.9, =0.0.14, =0.1.7, =0.0.6, =0.0.6, =0.0.1, =0.0.1, =0.0.3, =0.0.4 and more Source cves:...

allennlp (>=1.0.0.dev20200427, <=1.0.0rc4.dev20200501), allennlp-models (1.0.0rc3) +42 more potentially affected by CVE-2024-31583 via torch (1.5.0)

torch PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - allennlp =1.0.0.dev20200427, =0.0.1, =0.0.2, =0.0.9, =0.0.14, =0.1.7, =0.0.6, =0.0.6, =0.0.1, =0.0.1, =0.0.3, =0.0.4 and more Source cves:...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-1561 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-1561 Source advisory: OSV:GHSA-G9CJ-CFPP-4G2X...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-1183 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-1183 Source advisory: OSV:GHSA-QH6X-J82H-VPF9...

Arbitrary Code Execution

transformers is vulnerable to Arbitrary Code Execution. This vulnerability is due to the deserialization of untrusted data within the loadrepocheckpoint function in the TFPreTrainedModel class, where attackers can exploit the use of pickle.load on data from potentially untrusted sources to execut...

3m (0.1.0), academic-emotion (0.1.2) +871 more potentially affected by CVE-2024-3568 via transformers (>=4.0.0rc1, <=4.37.2)

transformers PYPI version =4.0.0rc1, =0.1.0, =0.0.3, =0.0.0.dev20230804, =0.3.0, =0.1.0, =0.2.5, =0.1.0, =0.0.1, =0.0.4, =0.0.4, =0.0.11, =0.0.13, =0.0.15, =0.0.21 and more Source cves: CVE-2024-3568 Source advisory: GHSA-37Q5-V5QM-C9V8...

allennlp (1.2.0rc1.dev20200923), awca (>=0.0.2, <=0.0.3.2) +9 more potentially affected by CVE-2024-3568 via transformers (3.1.0)

transformers PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 1.2.0rc1.dev20200923 - awca =0.0.2, =0.2.4, =0.4.8, =1.1.1, =1.1.0.dev202009251125, =2.1.0, =1.0.1, =1.1.0 Source cves:...

Transformers Deserialization of Untrusted Data vulnerability

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the loadrepocheckpoint function of the TFPreTrainedModel class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting...

sadedegel (>=0.11.3, <=0.18.3), treform (>=1.1.1, <=1.1.3) potentially affected by CVE-2024-3568 via transformers (3.0.0)

transformers PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - sadedegel =0.11.3, =1.1.1, =1.1.3 Source cves: CVE-2024-3568 Source advisory: OSV:GHSA-37Q5-V5QM-C9V8...

smaberta (>=0.0.1, <=0.0.2), trl (0.0.2) potentially affected by CVE-2024-3568 via transformers (2.6.0)

transformers PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - smaberta =0.0.1, =0.0.2 - trl 0.0.2 Source cves: CVE-2024-3568 Source advisory: OSV:GHSA-37Q5-V5QM-C9V8...

blanc (>=0.1.0, <=0.1.5) potentially affected by CVE-2024-3568 via transformers (2.4.0)

transformers PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - blanc =0.1.0, =0.1.5 Source cves: CVE-2024-3568 Source advisory: OSV:GHSA-37Q5-V5QM-C9V8...

boolean-question (0.0.3), ernie (0.0.19b0) +6 more potentially affected by CVE-2024-3568 via transformers (2.5.1)

transformers PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - boolean-question 0.0.3 - ernie 0.0.19b0 - methylbert =0.0.2, =0.0.1, =0.0.1a0, =0.1.1, =0.1.19, =0.2.0, =0.2.12 Source cves: CVE-2024-35...