Threats tagged 'ghsa-gv3h-7jmh-m254'

A path traversal vulnerability exists in deepset-ai farm versions up to 0.8.0 in the EmbeddingTokenizer.from_pretrained function within farm/modeling/tokenization.py. This flaw allows remote attackers to manipulate the vocab_filename argument to perform path traversal. The vulnerability affects unsupported versions of the product. Exploit code has been published, but no vendor response or patch is available.