weave vulnerabilities

1 known vulnerability in weave from Weights \& Biases. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  weave: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-7340Jul 31, 2024Weights \& BiasesEPSS 5.01%

  The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the