label-studio vulnerabilities

Label Studio annotation tool

1.20.0

5 years ago

2 months ago

Known vulnerabilities in the label-studio package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Cross-site Scripting (XSS)	[,1.18.0)
H Directory Traversal	[,1.16.0)
M Cross-site Scripting (XSS)	[,1.16.0)
M Server-side Request Forgery (SSRF)	[,1.16.0)
M Improper Input Validation	[,1.12.1)
M Improper Control of Interaction Frequency	[,1.5.0)
M Arbitrary File Upload	[,1.8.0)
M Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	[,1.11.0)
M Server-Side Request Forgery (SSRF)	[,1.11.0)
H Cross-site Scripting	[,1.9.2.post0)
M Cross-site Scripting	[,1.10.1)
H Exposure of Sensitive Information to an Unauthorized Actor	[,1.9.2.post0)
C Exposure of Sensitive Information to an Unauthorized Actor	[,1.8.2)
H Directory Traversal	[,1.7.2)
M Server-side Request Forgery (SSRF)	[,1.6.0)
M Arbitrary Code Execution	[,0.9.1)

93 VERSIONS IN TOTAL