Skip to content
Threat Feed
Subscribe

Vendor

SpeechBrain

1 brief RSS
high advisory

Arbitrary Code Execution in SpeechBrain via Insecure YAML Deserialization

SpeechBrain versions prior to 1.1.1 are vulnerable to arbitrary code execution when the Checkpointer component parses maliciously crafted CKPT.yaml files using PyYAML's unsafe loader.

SpeechBrain
1t 1c