PyPI/dgl: high
dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.4.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3x5x-fw77-g54c
- https://github.com/dmlc/dgl/security/advisories/GHSA-3x5x-fw77-g54c
- https://github.com/dmlc/dgl/issues/7874
- https://github.com/dmlc/dgl
published · modified · JSON