Threats affecting pkg:github/deepset-ai/farm

A path traversal vulnerability exists in deepset-ai farm up to version 0.8.0 in the WordEmbedding_LM.load function within the Model Package Loader component. This vulnerability allows local attackers to manipulate the embeddings_filename argument to access unauthorized file paths. The vulnerability has been publicly disclosed with exploit details available. The affected versions are no longer supported by the maintainer.