Deserialization bug in TensorFlow machine learning framework allowed arbitrary code execution

Retrieved on: 2021-08-31 11:03:45

Tags for this article:

Programming languages

Computer programming

Software engineering

Deep learning

Applied machine learning

Free statistical software

Cross-platform software

Click the tags to see associated articles and topics

Deserialization bug in TensorFlow machine learning framework allowed arbitrary code execution. View article details on hiswai:

Excerpt

The team behind TensorFlow, Google's popular open source Python machine learning library, has revoked support for YAML due to an arbitrary code execution ...

Article found on: portswigger.net

View Original Article