PyPI: nemoguardrails
SFTY-20240131-03391
Safety legacy ID: pyup.io-64722
Nemoguardrails 0.7.0 addresses server security vulnerabilities. These issues were primarily associated with uncontrolled data being utilized within path expressions and potential information leakage via exceptions. https://github.com/NVIDIA/NeMo-Guardrails/commit/21e2ffc37d806b7014654d280da76df4ded48c13
Overview
Nemoguardrails 0.7.0 addresses server security vulnerabilities. These issues were primarily associated with uncontrolled data being utilized within path expressions and potential information leakage via exceptions. https://github.com/NVIDIA/NeMo-Guardrails/commit/21e2ffc37d806b7014654d280da76df4ded48c13
Advisory
Nemoguardrails 0.7.0 addresses server security vulnerabilities. These issues were primarily associated with uncontrolled data being utilized within path expressions and potential information leakage via exceptions. https://github.com/NVIDIA/NeMo-Guardrails/commit/21e2ffc37d806b7014654d280da76df4ded48c13
How to Fix
Mitigation and Workarounds
---
Vulnerable Functions
Functions linked to known vulnerabilities.
Verified by Safety
Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.
Learn more