Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0.
CVSS Information
N/A
Vulnerability Type
可信数据的反序列化
Vulnerability Title
parlai 代码问题漏洞
Vulnerability Description
parlai是用于在各种公开可用的对话数据集上训练和评估 AI 模型。 ParlAI v1.1.0之前版本存在安全漏洞，该漏洞源于不安全的YAML反序列化逻辑。攻击者可利用该漏洞修改本地YAML配置文件，可能导致远程代码执行或类似风险
CVSS Information
N/A
Vulnerability Type
N/A