Vulnerabilidades do AWS Gluonts
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam AWS Gluonts: 1 registro(s), com versões afetadas e correções.
CVE-2026-100308
Alta · 7.8
CWE-470 29/09/2026
GluonTS arbitrary command execution during model deserialization
Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory.
To remediate this issue, users should upgrade to version 0.17.0 or later.