CVE-2021-23338
6.6
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
Summary
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | qlib | 0 < unspecified | affected |
Weaknesses
- Deserialization of Untrusted Data
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.