Description (CNA)
Deserialization of untrusted data in the LanguageModel class of Flair from versions 0.4.1 to latest are vulnerable to arbitrary code execution when loading a malicious model.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Flair / Flair | affected 0.4.1 through * |
CWE
CWE-502
References
ADP enrichment
No English description supplied.