Skip to content
OpenAdvisories

Product · AWS

gluonts

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-119083

    GluonTS arbitrary file write during archive extraction

    Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplies a crafted tar archive to write arbitrary files outside the intended extraction directory with the privileges of the extracting process via symbolic or …

    AWS gluonts
  • High 7.8
    CVE-2026-100308

    GluonTS arbitrary command execution during model deserialization

    Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model d…

    AWS gluonts