Threats tagged 'ghsa-gh9r-c94j-cmp5'

Stanza versions 1.14.0 up to but not including 1.15.0 contain a remote code execution vulnerability via unsafe pickle deserialization in the lemmatizer component. The lemmatizer checkpoint stores a compressed pickle of a pos_dict, which is deserialized without restriction, allowing attacker-supplied model files to execute arbitrary code during pipeline construction. This occurs when loading a lemma model checkpoint from an untrusted source. The vulnerability is fixed in version 1.15.0 by using a restricted unpickler that only allows safe data types.