github-featured / ludwig-ai--ludwig

发布

0 发布 85 Git 标签

RSS 订阅源
  • v0.17.8 de1d65bbf3
    比较

    Release 0.17.8: reject archive members that escape the extraction directory

    frostbyte_neo 发布于 2026-07-27 00:35:27 +00:00

    Fixes a path traversal in dataset archive extraction where a symlink member
    pointing outside the destination allowed archive-controlled content to be
    written to an arbitrary filesystem path. Reported by Udit Jain.

    下载附件