tocsin

PyPI/nvflare CVE-2022-31605: unknown, EPSS 2.13%

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of Untrusted Data, may allo

Action: Upgrade nvflare to 2.1.2 or later.

pip install nvflare==2.1.2

Affected

introducedfixedlast affected
02.1.2-

Fixed versions

2.1.2

Sources

CVE-2022-31605 · published · modified · JSON