backpropagate@1.1.1
Production-ready headless LLM fine-tuning with smart defaults, Windows support, and modular architecture
latest version
1.7.0
latest non vulnerable version
first published
5 months ago
latest version published
14 days ago
licenses detected
- [0,)
Direct Vulnerabilities
Known vulnerabilities in the backpropagate package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
backpropagate is a Production-ready headless LLM fine-tuning with smart defaults, Windows support, and modular architecture Affected versions of this package are vulnerable to Debug Messages Revealing Unnecessary Information in the authentication process. An attacker can gain unauthorized access to sensitive operations and data by connecting to the exposed UI endpoint without authentication. This allows reading uploaded datasets, triggering arbitrary training runs, pushing models to external repositories, causing disk exhaustion, and accessing user-supplied file paths, potentially leading to data exfiltration and supply-chain compromise. How to fix Debug Messages Revealing Unnecessary Information? Upgrade | [1.1.0,1.2.0) |