aim@4.0.0a13 vulnerabilities
A super-easy way to record, search and compare AI experiments.
-
latest version
4.0.3
-
first published
4 years ago
-
latest version published
7 months ago
-
licenses detected
- [3.16.0,)
Direct Vulnerabilities
Known vulnerabilities in the aim package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
aim is a super-easy way to record, search and compare AI experiments. Affected versions of this package are vulnerable to Improper Control of Generation of Code ('Code Injection') due to improper restriction of user access to the How to fix Improper Control of Generation of Code ('Code Injection')? There is no fixed version for |
[3.0.0,)
|
aim is a super-easy way to record, search and compare AI experiments. Affected versions of this package are vulnerable to Cross-Site Request Forgery (CSRF) due to the lack of CSRF and CORS protection in the aim dashboard. An attacker can exploit this by tricking a user into executing a malicious script that sends unauthorized requests to the aim server, leading to potential data loss and unauthorized data manipulation. How to fix Cross-Site Request Forgery (CSRF)? There is no fixed version for |
[0,)
|