Use of unclaimed s3 bucket in tests and examples
### Impact People who use some older NLP examples that reference the old S3 bucket. ### Patches The problem has been patched. Upgrade to snapshots for now. A release will be published later to address this due to the vulnerability mostly being examples and 1 class in the actual code base. ### Workarounds Download a word2vec google news vector from a new source using git lfs
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-36022US | medium5.3OT erhöht | — | ||
Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearning4j:dl4j-examples and org.deeplearning4j:platform-tests th… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/deeplearning4j/deeplearning4jPACKAGE
- https://github.com/deeplearning4j/deeplearning4j/security/advisories/GHSA-rc39-g977-687wWEB
- https://github.com/eclipse/deeplearning4j/security/advisories/GHSA-rc39-g977-687wWEB
- https://github.com/mmihaltz/word2vec-GoogleNews-vectorsWEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-36022ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan