nemo-toolkit@0.11.0b14 vulnerabilities
NeMo - a toolkit for Conversational AI
latest version
2.4.0
latest non vulnerable version
first published
5 years ago
latest version published
29 days ago
licenses detected
- [0,)
Direct Vulnerabilities
Known vulnerabilities in the nemo-toolkit package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
nemo-toolkit is a NeMo - a toolkit for Conversational AI Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the deserialization of untrusted data. An attacker can execute arbitrary code and tamper with data by providing specially crafted input that is deserialized without proper validation. How to fix Deserialization of Untrusted Data? Upgrade | [,2.3.2) |
nemo-toolkit is a NeMo - a toolkit for Conversational AI Affected versions of this package are vulnerable to Directory Traversal via the model loading process. An attacker can execute arbitrary code and tamper with data by supplying a How to fix Directory Traversal? Upgrade | [,2.3.2) |
nemo-toolkit is a NeMo - a toolkit for Conversational AI Affected versions of this package are vulnerable to Directory Traversal via How to fix Directory Traversal? Upgrade | [0,1.6.0) |