| Package | Affected versions | Patched versions |
|---|---|---|
| nnabla | < 1.0.10< 1.0.15 | 1.0.101.0.15 |
| neural network libraries | ≤ 1.0.14 |
nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) prior to v1.0.10 relies on the HOME environment variable, which might be untrusted.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free