https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 08:10:28 +0000 https://cve.radiocsirt.org/vuln/cve-2023-5245 <p><strong>Affected:</strong> ml.combust.mleap.mleap-tensorflow</p> <p>FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory.</p> <p>When creating an instance of TensorflowModel using the saved_model format and an exported tensorflow model, the apply() function invokes the vulnerable implementation of FileUtil.extract().</p> <p>Arbitrary file creation can directly lead to code execution</p> <p><strong>Affected:</strong> ml.combust.mleap.mleap-tensorflow</p> <p>FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory.</p> <p>When creating an instance of TensorflowModel using the saved_model format and an exported tensorflow model, the apply() function invokes the vulnerable implementation of FileUtil.extract().</p> <p>Arbitrary file creation can directly lead to code execution</p> https://cve.radiocsirt.org/vuln/cve-2023-5245