Skip to content
OpenAdvisories

Product · InternLM

lmdeploy

15 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3

    InternLM LMDeploy conf.py open code injection

    A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the atta…

  • Medium 5.3

    InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization

    A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function load_weight_ckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserializati…