PyPI/scio-pypi: critical
scio is vunerable to Remote Command Execution through PyTorch
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-m9mp-6x32-5rhg
- https://github.com/ThalesGroup/scio/security/advisories/GHSA-m9mp-6x32-5rhg
- https://github.com/pytorch/pytorch/security/advisories/GHSA-53q9-r3pm-6pq6
- https://github.com/ThalesGroup/scio
published · modified · JSON