PyPI/rasa CVE-2021-41127: unknown, EPSS 0.76%

Rasa is an open source machine learning framework to automate text-and voice-based conversations. In affected versions a vulnerability exists in the functionality that loads a trained model `tar.gz` f

Action: Upgrade rasa to 2.8.10 or later.

pip install rasa==2.8.10

Affected

Fixed versions

Sources

• osv: PYSEC-2021-381
• https://github.com/RasaHQ/rasa/security/advisories/GHSA-4365-fhm5-qcrx
• https://github.com/RasaHQ/rasa/commit/1b6b502f52d73b4f8cd1959ce724b8ad0eb33989

CVE-2021-41127 · published 2021-10-21T21:15:00Z · modified 2023-11-08T04:06:52.164910Z · JSON