repository icon
deepmind / sonnet Project repository

TensorFlow-based neural network library

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN7 DAYS

FIX

WITHINN/A DAYS

Arbitrary Code Execution via Insecure Deserialization (pickle.loads)
finddabugs
duplicate
High
Silent Precision Corruption in Distributed Training via Thread-Unsafe Global Sta...
ibfavas
self closed
Arbitrary Code Execution via Deserialization of Untrusted Data (pickle) in dm-so...
aminakhan3631
duplicate
High
Race condition in mixed_precision._cast_call leaks a patched snt.Module.__getatt...
noobosaurus-r3x
pending
Unsafe deserialization via pickle in DeepMind Sonnet model serialization
etwithin
duplicate
High
Symlink traversal in checkpoints generator allows out-of-directory file deletion...
susen2
pending
Vulnerable dependency pin in requirements-tf.txt: tensorflow==2.12.0rc0 affected...
susen2
pending
Build-time Local RCE in setup.py via CWD file hijack and exec of __version__ lin...
susen2
duplicate
High
Insecure Deserialization via Pickle in snt.Module Enables Arbitrary Code Executi...
sendorrr
self closed
Remote Code Execution (RCE) in dm-sonnet setup.py via Unsafe exec() Call
0s1mt
pending
Unrestricted Dynamic Class Resolution via getattr(sys.modules) in DNC Control Mo...
venkatatadu
duplicate
High
Unsafe Dynamic Attribute Access in Sonnet's DNC Controller Allows Unrestricted M...
jplopezy
pending