PyPI/label-studio CVE-2024-26152: medium 6.1, EPSS 2.20%
### Summary
Action: Upgrade label-studio to 1.11.0 or later.
pip install label-studio==1.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.0 | - |
Fixed versions
| 1.11.0 |
Sources
- osv: PYSEC-2024-249
- https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6xv9-957j-qfhg
- https://github.com/HumanSignal/label-studio/commit/5df9ae3828b98652e9fa290a19f4deedf51ef6c8
- https://github.com/HumanSignal/label-studio/pull/5232
- https://github.com/HumanSignal/label-studio/releases/tag/1.11.0
- https://github.com/advisories/GHSA-6xv9-957j-qfhg
CVE-2024-26152 · published · modified · JSON