repository icon
deepjavalibrary / djl Project repository

An Engine-Agnostic Deep Learning Framework in Java

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN34 DAYS

FIX

WITHIN122 DAYS

Path traversal via metadata.json item `name` in `AbstractRepository.save()` lead...
manulena
self closed
Server-Side Request Forgery via Model-Controlled synsetUrl in serving.properties...
galanzi2580-wq
self closed
`extract_train()` Recursive symlink extraction vulnerability
greed-linyao
pending
Arbitrary Code Execution via Java compilation and class loading from model artif...
romain-deperne
pending
SSRF + local file read via unvalidated URL in ImageFactory.fromUrl — supports fi...
kodareef5
self closed
RCE via torch.load(weights_only=False) in djl-convert CLI (djl_converter PyPI pa...
odysseypro25-project
duplicate
High
Unsafe Deserialization via torch.load(weights_only=False) in safetensors_convert...
elucidator-hky
self closed
SSRF via ImageFactory.fromUrl() Bypasses Utils.openUrl() Protections in DJL Serv...
alrightryanx
pending
Remote Code Execution via Class.forName() and unrestricted Java compilation in m...
d3banjan
duplicate
High
Arbitrary File Write via profilerOutput Path Traversal in ONNX Runtime Engine
optimus-fulcria
pending
Arbitrary File Write via profilerOutput Path Traversal in ONNX Runtime Engine
optimus-fulcria
pending
Arbitrary Code Execution via Native Shared Library Loading in ONNX Runtime Custo...
optimus-fulcria
pending
Server-Side Request Forgery via synsetUrl in Model Archive serving.properties
optimus-fulcria
pending
Arbitrary Code Execution via Malicious Model Archive (Java Source Compilation +...
optimus-fulcria
pending
Pixel Flood (OOM Crash) triggerable via Blind SSRF in ImageFactory
irony0egoist
pending
Unbounded Native Memory Allocation via JNI Leading to Denial of Service in DJL
hyperps
pending
Out-of-Bounds Write and Native Memory Corruption in DJL JNI Utilities
hyperps
pending
Arbitrary File Write via Path Traversal in metadata.json parsing (Bypassing Arch...
sec0xed
pending
SSRF Vulnerability in Utils.openUrl() Method
wangzinia
pending
Critical Issues in QuestionAnsweringTranslator (Division by Zero Crash and Vali...
7908837174
pending
Lack of Input Validation Allows Arbitrary File Creation: A Vulnerability Leading...
freedom-of-the-mind
pending
Arbitrary Overwrite of Server System Files Due to Lack of Input Validation, Lead...
freedom-of-the-mind
self closed
Path Traversal in TAR Extraction
hope4real
duplicate
Critical
Path Traversal in TarArchiveInputStream (Arbitrary File Write)
hope4real
duplicate
High
Arbitrary File Overwrite & RCE via Tarfile Path Traversal
freedom-of-the-mind
High
•$750
Use of unclaimed s3 bucket in .md file while making user download the jpg from i...
aftersnows
self closed
Symlink-Based Model Theft & File leakage during extracting
retr0reg
informative
High
Arbitrary File Overwrite & RCE via Tarfile Path Traversal
pinkdraconian
High
•$750
Tarslip that leads to arbitary file write
0xanis
High
•$750•CVE-2024-2914