Use of unclaimed s3 bucket in tests and examples
### Impact People who use some older NLP examples that reference the old S3 bucket. ### Patches The problem has been patched. Upgrade to snapshots for now. A release will be published later to address this due to the vulnerability mostly being examples and 1 class in the actual code base. ### Workarounds Download a word2vec google news vector from a new source using git lfs
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-36022US | medium5.3OT elevated | — | ||
Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearning4j:dl4j-examples and org.deeplearning4j:platform-tests th… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/deeplearning4j/deeplearning4jPACKAGE
- https://github.com/deeplearning4j/deeplearning4j/security/advisories/GHSA-rc39-g977-687wWEB
- https://github.com/eclipse/deeplearning4j/security/advisories/GHSA-rc39-g977-687wWEB
- https://github.com/mmihaltz/word2vec-GoogleNews-vectorsWEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-36022ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan