Lucene search

K
osvGoogleOSV:CVE-2021-23447
HistoryOct 07, 2021 - 5:15 p.m.

CVE-2021-23447

2021-10-0717:15:08
Google
osv.dev
3
package teddy vulnerability
type confusion
input sanitization
model content

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

43.8%

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array (instead of a string).

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

43.8%

Related for OSV:CVE-2021-23447