Threats tagged 'ghsa-w66p-3ghr-2qhf'

A weakness in eosphoros-ai DB-GPT up to version 0.8.2 affects the exec_module function in the hf_adapter.py file of the HuggingFace Adapter component. Manipulating the trust_remote_code argument can cause inclusion of functionality from an untrusted source. This vulnerability can be exploited remotely. Public exploit code is available. The project has been informed but has not yet responded or issued a fix.