Dem0000000

A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download in the library wandb/sdk/lib/hashutil.py of the component Artifact Integrity Validation. The manipulation leads to use of weak hash. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The pull request to fix this issue awaits acceptance.

**Name of the Vulnerable Software and Affected Versions** pyod versions 3.5.0 through 3.5.2 **Description** A deserialization flaw exists in the `pyod.utils.persistence.load()` function within the `pyod/utils/persistence.py` file. The issue occurs because `joblib.load()` is executed before any envelope validation, allowing a remote attacker to trigger arbitrary code execution by manipulating the `path` argument to load an untrusted model file. This specifically impacts machine learning pipelines that load models from user uploads, shared folders, or registries. **Recommendations** Update pyod to a version where the `trusted=True` flag is required for loading. Only load trusted artifacts and verify signatures or checksums. Sandbox loading flows to minimize the risk of execution.

**Name of the Vulnerable Software and Affected Versions** yashbhalgat HashNeRF-pytorch versions up to 82885e698295982504eb6a26d060a6b2473e3706 **Description** An issue exists in the Checkpoint File Handler component where the `torch.load()` function in the `run nerf.py` file is susceptible to deserialization. This occurs when the `ckpt path` argument is manipulated, allowing for potential code execution. This attack requires local access to the system. **Recommendations** As a temporary workaround, avoid using the `ckpt path` argument in the `run nerf.py` file until the pending pull request is accepted and merged into the software.

**Name of the Vulnerable Software and Affected Versions** will-moss Isaiah versions prior to 1.37.0 **Description** A flaw in the Master Websocket Handler component allows remote attackers to bypass authorization. The issue exists within the `Server.Handle()` function located in the `app/server/server/server.go` file, where improper handling of the `Agent` argument enables the missing authorization. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** will-moss Isaiah versions prior to 1.37.0 **Description** Improper authentication occurs within the Websocket Connection Authentication component in the file app/main.go. This issue allows a remote attacker to bypass authentication mechanisms. **Recommendations** As a temporary workaround, restrict access to the Websocket Connection Authentication component until a patch is available.

**Name of the Vulnerable Software and Affected Versions** waooAI waoowaoo versions prior to 0.4.2 **Description** Improper authentication occurs in the Internal Task Header Handler component within the `src/lib/api-auth.ts` library. The issue resides in the `getInternalTaskSession()`, `getAuthSession()`, `requireUserAuth()`, `requireProjectAuth()`, and `requireProjectAuthLight()` functions. A remote attacker can exploit this by manipulating the `x-internal-user-id` request argument. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict the use of the `x-internal-user-id` argument in requests to the affected functions to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** waooAI waoowaoo versions prior to 0.4.2 **Description** Improper authorization occurs in the Media Handler component due to the manipulation of the `storageKey` argument within the `stablePublicIdFromStorageKey()` function located in the `src/lib/media/hash.ts` library. This issue allows a remote attacker to bypass authorization, although the attack requires a high level of complexity and is considered difficult to execute. **Recommendations** As a temporary workaround, restrict the use of the `stablePublicIdFromStorageKey()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** zcaceres markdownify-mcp versions prior to 1.1.1 **Description** A flaw exists in the `saveToTempFile()` function within the `src/Markdownify.ts` file of the webpage-to-markdown, youtube-to-markdown, and bing-search-to-markdown components. This issue results in the generation of insufficiently random values. Exploitation requires local execution and is characterized by high complexity and difficult exploitability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.