PyPI/horovod CVE-2022-0315: unknown, EPSS 0.96%

Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0.

Action: Upgrade horovod to 0.24.0 or later.

pip install horovod==0.24.0

Affected

Fixed versions

Sources

• osv: PYSEC-2022-175
• https://huntr.dev/bounties/7e50397b-dd63-4bb5-b56d-704094a7da45
• https://github.com/horovod/horovod/commit/b96ecae4dc69fc0a83c7c2d3f1dde600c20a1b41
• https://github.com/advisories/GHSA-47wv-vhj2-g66m

CVE-2022-0315 · published 2022-03-24T09:15:00Z · modified 2023-11-08T04:07:31.934342Z · JSON