Skip to content
OpenAdvisories

Vendor

yoshitomo-matsubara

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.3

    yoshitomo-matsubara torchdistill main_util.py load_ckpt deserialization

    A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file torchdistill/common/main_util.py. Executing a manipulation of the argument src_ckpt can lead to deserialization. The attack needs to be laun…