synthcity@0.1.6 vulnerabilities

Synthetic data generator and evaluator!

Direct Vulnerabilities

Known vulnerabilities in the synthcity package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Deserialization of Untrusted Data

synthcity is a Synthetic data generator and evaluator!

Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the load_from_file function. An attacker can execute arbitrary code by submitting crafted input.

How to fix Deserialization of Untrusted Data?

Upgrade synthcity to version 0.1.9 or higher.

[,0.1.9)