nvflare@2.1.0 vulnerabilities
Federated Learning Application Runtime Environment
latest version
2.5.2
latest non vulnerable version
first published
3 years ago
latest version published
4 months ago
licenses detected
- [0,)
Direct Vulnerabilities
Known vulnerabilities in the nvflare package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
nvflare is a Federated Learning Application Runtime Environment Affected versions of this package are vulnerable to Race Condition in How to fix Race Condition? Upgrade | [,2.4.2)[2.5.0rc1,2.5.0rc2) |
nvflare is a Federated Learning Application Runtime Environment Affected versions of this package are vulnerable to Information Exposure due to improper implementation of logging. How to fix Information Exposure? Upgrade | [,2.3.0) |
nvflare is a Federated Learning Application Runtime Environment Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the possibility of using the Pickle module by an unprivileged network attacker. How to fix Deserialization of Untrusted Data? Upgrade | [,2.1.4) |
nvflare is a Federated Learning Application Runtime Environment Affected versions of this package are vulnerable to Directory Traversal in How to fix Directory Traversal? Upgrade | [,2.1.1) |
nvflare is a Federated Learning Application Runtime Environment Affected versions of this package are vulnerable to Denial of Service (DoS) in the admin conn. How to fix Denial of Service (DoS)? Upgrade | [,2.1.2) |