go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2023-6572 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2023-6572 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2023-6572 Source advisory: OSV:PYSEC-2023-255...

Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data Are Addressed

Summary There are multiple vulnerabilities in Runtimes 22.2 component impacting IBM Watson Studio in Cloud Pak for Data. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-2800 DESCRIPTION: Hugging Face Transformers is vulnerable to a...

abmarl (>=0.2.0, <=0.2.2), aliby (0.1.16) +5 more potentially affected by CVE-2023-48022 via ray (1.4.0)

ray PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.0, =0.1.4, =1.3.0, =1.4.10, =2021.6.22.dev0, =2021.7.1.dev0 Source cves: CVE-2023-48022 Source advisory: OSV:GHSA-6WGJ-66M2-XXP2...

abmarl (>=0.2.0, <=0.2.2), aliby (0.1.16) +5 more potentially affected by CVE-2023-48022 +2 more via ray (1.4.0)

ray PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.0, =0.1.4, =1.3.0, =1.4.10, =2021.6.22.dev0, =2021.7.1.dev0 Source cves: CVE-2023-48022, CVE-2023-48023, CVE-2023-6019 Source advisory:...

abmarl (>=0.2.0, <=0.2.2), aliby (0.1.16) +5 more potentially affected by CVE-2023-6021 via ray (1.4.0)

ray PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.0, =0.1.4, =1.3.0, =1.4.10, =2021.6.22.dev0, =2021.7.1.dev0 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service due to [CVE-2023-2800]

Summary Hugging Face Transformers is used by IBM App Connect Enterprise Certified Container for mapping assistance. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service. This bulletin provides patch information t...

Insecure Temporary File

transformers is vulnerable to Insecure Temporary Files. The vulnerability exists inside downloadurl due to the use of deprecated function tempfile.mktemp which creates temporary file names that are fundamentally insecure, as they do not ensure exclusive access to a file with the temporary name th...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2023-2800 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2023-2800 Source advisory: OSV:GHSA-282V-666C-3FVG...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2023-2800 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2023-2800 Source advisory: OSV:GHSA-282V-666C-3FVG...

accord-nlp (>=0.1.0, <=0.1.8), adaptnlp (>=0.3.0, <=0.3.7) +529 more potentially affected by CVE-2023-2800 via transformers (>=4.0.0rc1, <=4.29.2)

transformers PYPI version =4.0.0rc1, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.0.8, =0.0.4, =0.0.4, =0.0.11, =1.8.20, =0.0.3, =1.9.0, =1.0.0, =1.1.0 and more Source cves: CVE-2023-2800 Source advisory: OSV:GHSA-282V-666C-3FVG...

flambe (>=0.4.11, <=0.4.13) potentially affected by CVE-2023-2800 via transformers (2.2.2)

transformers PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - flambe =0.4.11, =0.4.13 Source cves: CVE-2023-2800 Source advisory: OSV:GHSA-282V-666C-3FVG...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2023-2800 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2023-2800 Source advisory: OSV:GHSA-282V-666C-3FVG...

blanc (>=0.1.0, <=0.1.5) potentially affected by CVE-2023-2800 via transformers (2.4.0)

transformers PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - blanc =0.1.0, =0.1.5 Source cves: CVE-2023-2800 Source advisory: OSV:GHSA-282V-666C-3FVG...

allennlp (>=0.9.1.dev20200415, <=1.0.0rc4.dev20200511), allennlp-models (>=1.0.0rc2, <=1.0.0rc3) +6 more potentially affected by CVE-2023-2800 via transformers (2.8.0)

transformers PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200415, =1.0.0rc2, =0.1.9, =0.0.2, =0.1.0, =0.3.2 Source cves: CVE-2023-2800 Source advisory: OSV:GHSA-282V-666C-3F...

genienlp (0.3.0), soco-mrc (>=0.0.6, <=0.0.8.1) +1 more potentially affected by CVE-2023-2800 via transformers (2.9.0)

transformers PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - genienlp 0.3.0 - soco-mrc =0.0.6, =1.0.37, =1.0.88 Source cves: CVE-2023-2800 Source advisory: OSV:GHSA-282V-666C-3FVG...

allennlp (>=1.0.0rc4.dev20200513, <=1.0.0rc6.dev20200601), allennlp-models (>=1.0.0rc4, <=1.0.0rc5) potentially affected by CVE-2023-2800 via transformers (2.9.1)

transformers PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc4.dev20200513, =1.0.0rc4, =1.0.0rc5 Source cves: CVE-2023-2800 Source advisory: OSV:GHSA-282V-666C-3FVG...

allennlp (>=0.9.1.dev20200404, <=0.9.1.dev20200413), pygaggle (0.0.1) potentially affected by CVE-2023-2800 via transformers (2.7.0)

transformers PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200404, =0.9.1.dev20200413 - pygaggle 0.0.1 Source cves: CVE-2023-2800 Source advisory: OSV:GHSA-282V-666C-3FVG...

boolean-question (0.0.3), ernie (0.0.19b0) +6 more potentially affected by CVE-2023-2800 via transformers (2.5.1)

transformers PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - boolean-question 0.0.3 - ernie 0.0.19b0 - methylbert =0.0.2, =0.0.1, =0.0.1a0, =0.1.1, =0.1.19, =0.2.0, =0.2.12 Source cves: CVE-2023-28...

smaberta (>=0.0.1, <=0.0.2), trl (0.0.2) potentially affected by CVE-2023-2800 via transformers (2.6.0)

transformers PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - smaberta =0.0.1, =0.0.2 - trl 0.0.2 Source cves: CVE-2023-2800 Source advisory: OSV:GHSA-282V-666C-3FVG...