PyPI/rasa CVE-2021-41127: high 7.3, EPSS 0.76%

Maliciously Crafted Model Archive Can Lead To Arbitrary File Write

Action: Upgrade rasa to 2.8.10 or later.

pip install rasa==2.8.10

Affected

Fixed versions

Sources

• osv: GHSA-4365-fhm5-qcrx
• https://github.com/RasaHQ/rasa/security/advisories/GHSA-4365-fhm5-qcrx
• https://github.com/RasaHQ/rasa/commit/1b6b502f52d73b4f8cd1959ce724b8ad0eb33989
• https://github.com/RasaHQ/rasa
• https://github.com/pypa/advisory-database/tree/main/vulns/rasa/PYSEC-2021-381.yaml

CVE-2021-41127 · published 2021-10-22T16:19:13Z · modified 2026-07-08T06:27:26.694829411Z · JSON