Threats tagged 'ghsa-gr3v-c93w-qxpw'

A path traversal vulnerability exists in the SafeTensorIndex.loadWeights function of tjake Jlama up to versions 0.8.4 and 0.9.0-beta. This flaw allows remote attackers to manipulate the weight_map argument to perform unauthorized path traversal. The vulnerability has a medium severity score and public exploit code is available. The project has been notified but has not yet issued a response or patch.