BigDL@2.4.0b20231109 vulnerabilities

Building Large-Scale AI Applications for Distributed Big Data

Known vulnerabilities in the BigDL package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Inadequate Encryption Strength bigdl is a Building Large-Scale AI Applications for Distributed Big Data Affected versions of this package are vulnerable to Inadequate Encryption Strength due to the usage of an insecure `DES3` encryption algorithm. How to fix Inadequate Encryption Strength? Upgrade `bigdl` to version 2.4.0 or higher.	[,2.4.0)
C Command Injection bigdl is a Building Large-Scale AI Applications for Distributed Big Data Affected versions of this package are vulnerable to Command Injection in `pickle.load()` How to fix Command Injection? Upgrade `bigdl` to version 2.4.0 or higher.	[,2.4.0)