Skip to content
OpenAdvisories

Product · HumanSignal

label-studio

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-43791

    Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens

    Label Studio is a multi-type data labeling and annotation tool with standardized output format. There is a vulnerability that can be chained within the ORM Leak vulnerability to impersonate any account on Label Studio. An attacker could exploit these vulnerab…

    HumanSignal label-studio label-studio PyPI