DeepPavlov vulnerabilities
CVEs whose affected-version data names the DeepPavlov package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-112100Medium· 5.5DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.__init__ code injection
A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.__init__ of the file deeppavlov/models/preprocessors/multitask_preprocessor.py. This manipulation of the argument preproces…
CVE-2026-112098Medium· 6.3DeepPavlov Config Reference Resolver params.py resolve code injection
A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The atta…
CVE-2026-109155Medium· 6.3A flaw has been found in DeepPavlov up to 1.7.0
A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The project was informe…