Skip to content
OpenAdvisories

Package · PyPI

autogluon-multimodal

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-6h2x-4gjf-jc5w

    autogluon.multimodal vulnerable to unsafe YAML deserialization

    ### Impact A potential unsafe deserialization issue exists within the `autogluon.multimodal` module, where YAML files are loaded via `yaml.load()` instead of `yaml.safe_load()`. The deserialization of untrusted data may allow an unprivileged third party to ca…

    autogluon-multimodal PyPI