CVE-2021-41127
2 advisories.
PyPI/rasa CVE-2021-41127: high 7.3
Maliciously Crafted Model Archive Can Lead To Arbitrary File Write
Action: Upgrade rasa to 2.8.10 or later.
pip install rasa==2.8.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.10 | - |
Fixed versions
| 2.8.10 |
Sources
- osv: GHSA-4365-fhm5-qcrx
- https://github.com/RasaHQ/rasa/security/advisories/GHSA-4365-fhm5-qcrx
- https://github.com/RasaHQ/rasa/commit/1b6b502f52d73b4f8cd1959ce724b8ad0eb33989
- https://github.com/RasaHQ/rasa
- https://github.com/pypa/advisory-database/tree/main/vulns/rasa/PYSEC-2021-381.yaml
CVE-2021-41127 · published · modified · JSON
PyPI/rasa CVE-2021-41127: unknown
Rasa is an open source machine learning framework to automate text-and voice-based conversations. In affected versions a vulnerability exists in the functionality that loads a trained model `tar.gz` f
Action: Upgrade rasa to 2.8.10 or later.
pip install rasa==2.8.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.10 | - |
Fixed versions
| 2.8.10 |
Sources
- osv: PYSEC-2021-381
- https://github.com/RasaHQ/rasa/security/advisories/GHSA-4365-fhm5-qcrx
- https://github.com/RasaHQ/rasa/commit/1b6b502f52d73b4f8cd1959ce724b8ad0eb33989
CVE-2021-41127 · published · modified · JSON