Gensim
Monthly
Deserialization of untrusted data in gensim's SaveLoad.load (gensim/utils.py) lets an attacker execute arbitrary code on any host that loads a crafted model file, affecting gensim versions up to and including 4.4.0 as well as the current develop HEAD. The flaw is reachable through the public model-loading API and requires the victim to load an attacker-supplied serialized model or vector file (no authentication is needed to craft or deliver the file; the assessed CVSS:3.1 vector is AV:N/AC:L/PR:N/UI:R with high confidentiality, integrity and availability impact, while the vendor-feed CVSS 4.0 score of 5.1 reflects a lower PR:L/E:P reading of the same issue). Publicly available exploit code exists, and because the maintainer closed issue #3663 without a comment, PR, or fix, no vendor patch is available and defense currently depends entirely on refusing to load untrusted files or wrapping the load path in a restricted unpickler.
Deserialization of untrusted data in gensim's SaveLoad.load (gensim/utils.py) lets an attacker execute arbitrary code on any host that loads a crafted model file, affecting gensim versions up to and including 4.4.0 as well as the current develop HEAD. The flaw is reachable through the public model-loading API and requires the victim to load an attacker-supplied serialized model or vector file (no authentication is needed to craft or deliver the file; the assessed CVSS:3.1 vector is AV:N/AC:L/PR:N/UI:R with high confidentiality, integrity and availability impact, while the vendor-feed CVSS 4.0 score of 5.1 reflects a lower PR:L/E:P reading of the same issue). Publicly available exploit code exists, and because the maintainer closed issue #3663 without a comment, PR, or fix, no vendor patch is available and defense currently depends entirely on refusing to load untrusted files or wrapping the load path in a restricted unpickler.