Skip to content

Vendor

dmlc vulnerabilities

2 published CVES affecting dmlc, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of dmlc alerts

Products

Latest dmlc CVEs

Newest publication first

  1. CVE-2026-94092 dmlc dgl utils.py _read_torch_data deserialization

    Published
    MediumCVSS 5.1

    A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be u...

  2. CVE-2024-12216 Arbitrary File Write via TarSlip in dmlc/gluon-cv

    Published
    HighCVSS 7.1

    A vulnerability in the ImageClassificationDataset.from_csv() API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerabil...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.