Skip to content
OpenAdvisories

Package · PyPI

rasa

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.1
    CVE-2024-49375 Public exploit

    Remote Code Execution via Remote Model Loading in Rasa

    Open source machine learning framework. A vulnerability has been identified in Rasa that enables an attacker who has the ability to load a maliciously crafted model remotely into a Rasa instance to achieve Remote Code Execution. The prerequisites for this are…

    RasaHQ rasa-pro-security-advisories rasa rasa-pro PyPI
  • High 7.3
    CVE-2021-41127

    Maliciously Crafted Model Archive Can Lead To Arbitrary File Write in rasa

    Rasa is an open source machine learning framework to automate text-and voice-based conversations. In affected versions a vulnerability exists in the functionality that loads a trained model `tar.gz` file which allows a malicious actor to craft a `model.tar.gz…

    RasaHQ rasa rasa PyPI