Skip to content
OpenAdvisories

Package · PyPI

label-studio

12 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens

    Label Studio is a multi-type data labeling and annotation tool with standardized output format. There is a vulnerability that can be chained within the ORM Leak vulnerability to impersonate any account on Label Studio. An attacker could exploit these vulnerab…