Stanza lemmatizer checkpoint loading allows arbitrary code execution
Programs using this Python language tool can be hacked.
Summary
The Stanza Python NLP library passes nested pickle data from a lemmatizer model file to an unrestricted loader. Loading an attacker-supplied model can execute arbitrary code; versions from 1.14.0 until 1.15.0 are affected.
Affected when
- Stanza 1.14.0 to before 1.15.0
- Loading an attacker-supplied lemmatizer model file
What to do
Update to Stanza 1.15.0.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen