Skip to content
OpenAdvisories

Vendor

hankcs

2 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 6.3

    hankcs HanLP Model Config Loading reflection.py hanlp.load deserialization

    A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plugins/hanlp_common/hanlp_common/reflection.py of the component Model Config Loading. This manipulation of the argument classpath causes dese…

  • Medium 6.3

    hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization

    A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load_word2vec_as_vocab_tensor of the file hanlp/utils/torch_util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack i…