Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-6507

Deep Lake Kaggle command injection

Description

Command injection when ingesting a remote Kaggle dataset due to a lack of input sanitization in the ingest_kaggle() API

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

deeplake

Default version status: unaffected

  • 0 to ≤ 3.9.10affected

References