Skip to content
OpenAdvisories

Package · PyPI

gluoncv

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    CVE-2024-12216

    Arbitrary File Write via TarSlip in dmlc/gluon-cv

    A vulnerability in the `ImageClassificationDataset.from_csv()` API of the `dmlc/gluon-cv` repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts `tar.gz` files from URLs without proper sanitization, making it suscepti…

    dmlc dmlc/gluon-cv gluoncv PyPI