intel-extension-for-transformers@1.0 vulnerabilities

Repository of Intel® Intel Extension for Transformers

Direct Vulnerabilities

Known vulnerabilities in the intel-extension-for-transformers package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
SQL Injection

intel-extension-for-transformers is a Repository of Intel® Intel Extension for Transformers

Affected versions of this package are vulnerable to SQL Injection due to improper user-input sanitization in the intel_extension_for_transformers/neural_chat/utils/database/mysqldb.py file.

How to fix SQL Injection?

Upgrade intel-extension-for-transformers to version 1.2.2 or higher.

[,1.2.2)