PyPI/label-studio CVE-2023-47116: medium 5.3, EPSS 0.74%
Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.11.0 and was tested on version 1.8.2. Label Studio's SSRF protections that c
Action: Upgrade label-studio to 1.11.0 or later.
pip install label-studio==1.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.0 | - |
Fixed versions
| 1.11.0 |
Sources
- osv: PYSEC-2024-127
- https://github.com/HumanSignal/label-studio/security/advisories/GHSA-p59w-9gqw-wj8r
- https://github.com/HumanSignal/label-studio/commit/55dd6af4716b92f2bb213fe461d1ffbc380c6a64
- https://github.com/HumanSignal/label-studio/releases/tag/1.11.0
CVE-2023-47116 · published · modified · JSON