Skip to content
OpenAdvisories

Vendor

facebookresearch

2 known vulnerabilities.

Products

hydra 1 ParlAI 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-68508

    Hydra: hydra.utils.instantiate with untrusted config can lead to code execution

    Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate() resolves and calls Python objects selected by configuration through _resolve_target() in hydra/_internal/instantiate/_instantiate2.py, allowing atta…

    facebookresearch hydra hydra-core PyPI
  • High 8.4
    CVE-2021-39207

    Deserialization of Untrusted Data in parlai

    parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affected versions the package is vulnerable to YAML deserialization attack caused by unsafe loading which leads to Arbitary code execution. This…

    facebookresearch ParlAI