PVE-2024-73647

Advisory

Affected versions of DeepSpeed are vulnerable to Command Injection — CWE-78. The attack c…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed * Update version.txt after 0.15.1 release by loadams in https://github.co…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://github.com/microsoft/DeepSpeed/commit/659f6be10574e49d7d5b76de7949c7c0254cd857
• https://pypi.org/project/deepspeed
• https://data.safetycli.com/changelogs/deepspeed/