Hanlp
Monthly
Unsafe deserialization in hankcs HanLP through 2.1.0-beta.64 allows unauthenticated remote attackers to achieve code execution when a victim loads an attacker-supplied model or config in which the classpath argument passed through hanlp.load() has been manipulated, reaching the reflection logic in plugins/hanlp_common/hanlp_common/reflection.py. Exploitation is not automatic against an idle installation: it requires the user to obtain and load an untrusted model, so exposure is concentrated in pipelines that consume third-party or externally sourced models rather than those loading only first-party artifacts. Publicly available exploit code exists (a PoC archive is linked from the VulDB entry), but there is no CISA KEV confirmation of active exploitation; the project was notified via GitHub issue #1969 and has not responded at time of analysis.
Deserialization of untrusted data in HanLP through 2.1.0-beta.64 allows an attacker who supplies a crafted vectors.vocab file to execute arbitrary code when a victim loads it with load_word2vec_as_vocab_tensor. The attack can be delivered remotely but requires the victim to open or load the malicious model file, so user interaction is the key prerequisite; no authentication or special configuration is needed. Publicly available exploit code exists, but the supplied intelligence does not confirm CISA KEV active exploitation.
Unsafe deserialization in hankcs HanLP through 2.1.0-beta.64 allows unauthenticated remote attackers to achieve code execution when a victim loads an attacker-supplied model or config in which the classpath argument passed through hanlp.load() has been manipulated, reaching the reflection logic in plugins/hanlp_common/hanlp_common/reflection.py. Exploitation is not automatic against an idle installation: it requires the user to obtain and load an untrusted model, so exposure is concentrated in pipelines that consume third-party or externally sourced models rather than those loading only first-party artifacts. Publicly available exploit code exists (a PoC archive is linked from the VulDB entry), but there is no CISA KEV confirmation of active exploitation; the project was notified via GitHub issue #1969 and has not responded at time of analysis.
Deserialization of untrusted data in HanLP through 2.1.0-beta.64 allows an attacker who supplies a crafted vectors.vocab file to execute arbitrary code when a victim loads it with load_word2vec_as_vocab_tensor. The attack can be delivered remotely but requires the victim to open or load the malicious model file, so user interaction is the key prerequisite; no authentication or special configuration is needed. Publicly available exploit code exists, but the supplied intelligence does not confirm CISA KEV active exploitation.