ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-23338

PoC —
CVSS 3.1
7.2 high
EPSS
4%p89
Published
()
Modified
Description

This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.

Vendors
microsoft
Products
qlib
Weakness
CWE-502
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news

No ingested article mentions this CVE yet.