PVE-2024-73613

Advisory

Affected versions of the flexeval package are vulnerable to Code Injection (CWE-94). This…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed * Fix import for reward modules by ryokan0123 in https://github.com/sbint…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://github.com/sbintuitions/flexeval/commit/a97ec373de5c69ef518690b29303844dbf4e37ef
• https://pypi.org/project/flexeval
• https://data.safetycli.com/changelogs/flexeval/