Deepjavalibrary/Djl
Approved changes feed: RSS · Atom
cpe:2.3:a:deepjavalibrary:deepjavalibrary/djl:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Deepjavalibrary (97772054-0d95-5d2c-827a-76835c07b186) |
|---|---|
| Product | Deepjavalibrary/Djl (3f53afa2-d387-5b87-ab6a-e12f25a8f7ff) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-2914 |
vulnerable | 2026-06-08 06:35:27.693055 |
TarSlip Vulnerability in deepjavalibrary/djl
HIGH (7.8)
A TarSlip vulnerability exists in the deepjavalibrary/djl, affecting version 0.26.0 and fixed in version 0.27.0. This vulnerability allows an attacker to manipulate file paths within tar archives to overwrite arbitrary files on the target system. Exploitation of this vulnerability could lead to remote code execution, privilege escalation, data theft or manipulation, and denial of service. The vulnerability is due to improper validation of file paths during the extraction of tar files, as demonstrated in multiple occurrences within the library's codebase, including but not limited to the files_util.py and extract_imagenet.py scripts.
Published: 2024-06-06T17:55:55.145Z
Updated: 2024-08-01T19:25:42.176Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.