PyPI/label-studio CVE-2023-47117: high 7.5, EPSS 4.06%
Label Studio is an open source data labeling tool. In all current versions of Label Studio prior to 1.9.2post0, the application allows users to insecurely set filters for filtering tasks. An attacker
Action: Upgrade label-studio to 1.9.2 or later.
pip install label-studio==1.9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.2 | - |
Fixed versions
| 1.9.2 |
Sources
- osv: PYSEC-2023-275
- https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6hjj-gq77-j4qw
- https://github.com/HumanSignal/label-studio/commit/f931d9d129002f54a495995774ce7384174cef5c
CVE-2023-47117 · published · modified · JSON