Skip to content
OpenAdvisories

Vendor

dmlc

2 known vulnerabilities.

Products

dgl 1 dmlc/gluon-cv 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2024-12216

    Arbitrary File Write via TarSlip in dmlc/gluon-cv

    A vulnerability in the `ImageClassificationDataset.from_csv()` API of the `dmlc/gluon-cv` repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts `tar.gz` files from URLs without proper sanitization, making it suscepti…

    dmlc dmlc/gluon-cv gluoncv PyPI