Skip to content
OpenAdvisories

Package · PyPI

modelscope

1 known vulnerabilities.

1 result · Feed

  • High 7.3

    ModelScope is vulnerable to arbitrary code injection via a crafted module

    An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration file (dey_mini.yaml) under the key ['nnet']['module'].