accelerate vulnerabilities
1 known vulnerability in accelerate from Huggingface. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest first
- 7.1 High severity
accelerate: Improper Limitation of a Pathname to a Restricted Directory
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes. Attackers can supply relative paths