Threats tagged 'ghsa-4265-pjrw-m328'

A path traversal weakness exists in the load_state_dict_into_model function of the MoE Shard Checkpoint Loader component in lxtGH OMG-Seg up to commit f3b26b609bae919760cd3ccf09c36179bb8624a0. The vulnerability arises from manipulation of the weight_map argument and can be exploited remotely. Public exploit code is available. The project does not use versioning, and no fix or response from the maintainers has been reported.