Skip to content
Threat Feed
Subscribe

Product

ESPnet (< 202609)

1 brief RSS
high advisory

Arbitrary Code Execution in ESPnet via Insecure Deserialization

ESPnet versions prior to 202609 are vulnerable to arbitrary code execution due to the insecure deserialization of pretrained model checkpoints using torch.load with weights_only=False.

ESPnet
1t 1c