Threats tagged 'ghsa-jx9r-269r-fp82'

A code injection vulnerability exists in huggingface finetrainers versions 0.1.0 and 0.2.0 within the resolve_component_cls function of finetrainers/utils/model.py. This flaw allows remote attackers to manipulate the Library argument to execute arbitrary code. The vulnerability has a CVSS score of 6.3 (medium severity) and public exploit code is available. The project has been notified but has not issued a response or patch yet.