Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-71256
HistorySep 14, 2021 - 12:00 a.m.

parlai code issue vulnerability

2021-09-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
parlai
ai models
code issue
vulnerability
insecure loading package
yaml deserialization attacks
arbitrary code execution
cnvd

EPSS

0.002

Percentile

56.8%

parlai is used to train and evaluate AI models on a variety of publicly available conversational datasets. parlai suffers from a code issue vulnerability that stems from an insecure loading package that is vulnerable to YAML deserialization attacks in the affected version. An attacker could exploit this vulnerability to cause arbitrary code execution.

EPSS

0.002

Percentile

56.8%

Related for CNVD-2021-71256