tocsin

CVE-2024-28425

1 advisory.

PyPI/greykite CVE-2024-28425: high 7.5

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/pickle_utils.py. This vulnerability allows attackers to execute arbitrary code v

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-1.0.0

Fixed versions

No fixed version in the source.

Sources

CVE-2024-28425 · published · modified · JSON