Deserialization of Untrusted Data

Overview tensorrt-llm is a TensorRT-LLM: A TensorRT Toolbox for Large Language Models Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the ZeroMqQueue class in executor.py. An attacker can execute code, disclose information, and tamper with data by gaining...