Bofei Chen

**Name of the Vulnerable Software and Affected Versions** sentence-transformers (affected versions not specified) **Description** A security control bypass exists due to a logic flaw in the `import module class` helper within `sentence transformers/util/misc.py`. The guard condition includes an `or os.path.exists(model name or path)` clause that satisfies the trust gate if the supplied path exists on the local filesystem, ignoring the `trust remote code=False` argument. This allows attackers who can influence the contents of a model directory on disk to place malicious Python files, such as `modeling *.py` referenced via `modules.json`. Consequently, arbitrary code is executed during the import process when an application loads the model using `SentenceTransformer(path, trust remote code=False)`, bypassing the intended security contract. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ComfyUI version 0.23.0 **Description** An unsafe deserialization issue exists in the LoadTrainingDataset node. Unauthenticated remote attackers can execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. The attack involves uploading a malicious `shard *.pkl` file through the POST '/upload/image' endpoint and subsequently queuing a workflow graph via the POST '/prompt' endpoint that references the uploaded file. This process causes `torch.load` to deserialize the payload using ` reduce `, executing arbitrary commands with the privileges of the ComfyUI process user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Spring AI versions 1.0.0 through 1.0.5 Spring AI versions 1.1.0 through 1.1.4 **Description** Various `FilterExpressionConverter` implementations fail to properly escape keys and values when translating filter expression objects into specific vector store query languages. This improper escaping allows for query injection, which can enable attackers to alter vector store queries, potentially leading to data exposure and tampering. **Recommendations** Update versions 1.0.0 through 1.0.5 to 1.0.6. Update versions 1.1.0 through 1.1.4 to 1.1.5.

**Name of the Vulnerable Software and Affected Versions** Apache Dubbo versions 3.1.0 through 3.1.10 Apache Dubbo versions 3.2.0 through 3.2.4 **Description** A deserialization vulnerability exists when decoding a malicious package, which can allow a remote attacker to execute arbitrary code or cause a denial of service. The issue is related to shortcomings in the deserialization mechanism of the Apache Dubbo RPC framework. **Recommendations** For Apache Dubbo versions 3.1.0 through 3.1.10, upgrade to the latest version to fix the issue. For Apache Dubbo versions 3.2.0 through 3.2.4, upgrade to the latest version to fix the issue. As a temporary workaround, consider restricting the decoding of packages to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SOFARPC versions prior to 5.11.0 **Description** SOFARPC is a Java RPC framework. Through a carefully crafted payload, an attacker can achieve JNDI injection or system command execution. The default configuration of the SOFARPC framework uses a blacklist to filter out dangerous classes during the deserialization process. However, the blacklist is not comprehensive, allowing an actor to exploit certain native JDK classes and common third-party packages to construct gadget chains capable of achieving JNDI injection or system command execution attacks. **Recommendations** For versions prior to 5.11.0, update to version 5.11.0 to resolve the issue. As a temporary workaround, users can add `-Drpc serialize blacklist override=javax.sound.sampled.AudioFileFormat` to the blacklist.