determined@0.17.14rc0

Determined AI: The fastest and easiest way to build deep learning models.

0.38.1

6 years ago

1 years ago

Known vulnerabilities in the determined package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Missing Authorization determined is a Determined Deep Learning Training Platform Affected versions of this package are vulnerable to Missing Authorization via the `api_generic_tasks` process. An attacker can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own by sending unauthorized requests to the affected endpoints. How to fix Missing Authorization? There is no fixed version for `determined`.	[0,)
M Race Condition determined is a Determined Deep Learning Training Platform Affected versions of this package are vulnerable to Race Condition in the workspace list. It could cause outdated workspace list results to appear when switching between different workspace list filter options. How to fix Race Condition? Upgrade `determined` to version 0.26.7 or higher.	[,0.26.7)
M Information Exposure determined is a Determined Deep Learning Training Platform Affected versions of this package are vulnerable to Information Exposure due to using JWT tokens over URLs which can lead to session hijacking. How to fix Information Exposure? Upgrade `determined` to version 0.23.0 or higher.	[,0.23.0)