Description
NVIDIA Merlin Transformers4Rec for Linux contains a vulnerability in the Trainer component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | Merlin Transformers4Rec | All versions that do not include commit 876f19e | — |