Threats tagged 'ghsa-p764-mm73-mpf6'

A path traversal vulnerability exists in deepset-ai farm up to version 0.8.0 in the WordEmbedding_LM.load function within the Model Package Loader component. This vulnerability allows local attackers to manipulate the embeddings_filename argument to access unauthorized file paths. The vulnerability has been publicly disclosed with exploit details available. The affected versions are no longer supported by the maintainer.