PyPI/autogluon-multimodal: high
autogluon.multimodal vulnerable to unsafe YAML deserialization
Action: Upgrade autogluon-multimodal to 0.4.3 or later.
pip install autogluon-multimodal==0.4.3pip install autogluon-multimodal==0.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.4.0 | 0.4.3 | - |
| 0.5.0 | 0.5.2 | - |
Fixed versions
| 0.4.3 | 0.5.2 |
Sources
- osv: GHSA-6h2x-4gjf-jc5w
- https://github.com/awslabs/autogluon/security/advisories/GHSA-6h2x-4gjf-jc5w
- https://github.com/awslabs/autogluon/pull/1987
- https://github.com/awslabs/autogluon/commit/23a37e74e58d03055c84a1b89c5af6c3db296b5e
- https://github.com/awslabs/autogluon
published · modified · JSON