CVE-2026-112098Medium· 6.3▾ SunlitA security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The atta…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
DeepPavlov 1.0DeepPavlov 1.1DeepPavlov 1.2DeepPavlov 1.3DeepPavlov 1.4DeepPavlov 1.5DeepPavlov 1.6DeepPavlov 1.7.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112100Medium· 5.5DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.__init__ code injection
CVE-2026-109155Medium· 6.3A flaw has been found in DeepPavlov up to 1.7.0
CVE-2025-10097Medium· 6.3A vulnerability was identified in SimStudioAI sim up to 1.0.0
CVE-2023-29383Low· 3.3In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger)
CVE-2023-27533High· 8.8A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation
CVE-2022-0391High· 7.5A flaw was found in Python, specifically within the urllib.parse module