1.5.0
minor
Dec 19, 2025
Released
Dec 19, 2025
License
Apache-2.0
Size
441.5 KB
Dependencies
(41)
accelerate
<2.0,>=0.34.0
autogluon-common
==1.5.0
autogluon-core
==1.5.0
autogluon-features
==1.5.0
boto3
<2,>=1.10
datasets
<3.6.0,>=2.16.0
defusedxml
<0.7.2,>=0.7.1
evaluate
<0.5.0,>=0.4.0
+ 33 more
1.4.0
minor
Jul 29, 2025
Released
Jul 29, 2025
License
Apache-2.0
Size
444.2 KB
Dependencies
(41)
accelerate
<2.0,>=0.34.0
autogluon-common
==1.4.0
autogluon-core
==1.4.0
autogluon-features
==1.4.0
boto3
<2,>=1.10
datasets
<3.6.0,>=2.16.0
defusedxml
<0.7.2,>=0.7.1
evaluate
<0.5.0,>=0.4.0
+ 33 more
1.3.1
patch
May 22, 2025
Released
May 22, 2025
License
Apache-2.0
Size
443.8 KB
Dependencies
(40)
accelerate
<2.0,>=0.34.0
autogluon-common
==1.3.1
autogluon-core
==1.3.1
autogluon-features
==1.3.1
boto3
<2,>=1.10
datasets
<3.6.0,>=2.16.0
defusedxml
<0.7.2,>=0.7.1
evaluate
<0.5.0,>=0.4.0
+ 32 more
1.3.0
minor
May 01, 2025
Released
May 01, 2025
License
Apache-2.0
Size
443.8 KB
Dependencies
(40)
accelerate
<2.0,>=0.34.0
autogluon-common
==1.3.0
autogluon-core
==1.3.0
autogluon-features
==1.3.0
boto3
<2,>=1.10
datasets
<3.6.0,>=2.16.0
defusedxml
<0.7.2,>=0.7.1
evaluate
<0.5.0,>=0.4.0
+ 32 more
1.2
minor
Nov 27, 2024
Released
Nov 27, 2024
License
Apache-2.0
Size
419.9 KB
Dependencies
(40)
accelerate
<1.0,>=0.34.0
autogluon-common
==1.2
autogluon-core
==1.2
autogluon-features
==1.2
boto3
<2,>=1.10
datasets
<2.15.0,>=2.10.0
defusedxml
<0.7.2,>=0.7.1
evaluate
<0.5.0,>=0.4.0
+ 32 more
1.1.1
patch
Jun 14, 2024
Released
Jun 14, 2024
License
Apache-2.0
Size
417.9 KB
Dependencies
(42)
accelerate
<0.22.0,>=0.21.0
autogluon-common
==1.1.1
autogluon-core
==1.1.1
autogluon-features
==1.1.1
black
~=23.0
boto3
<2,>=1.10
datasets
<2.15.0,>=2.10.0
defusedxml
<0.7.2,>=0.7.1
+ 34 more
0.8.3
patch
May 02, 2024
Released
May 02, 2024
License
Apache-2.0
Size
361.2 KB
Dependencies
(41)
accelerate
<0.22.0,>=0.21.0
autogluon-common
==0.8.3
autogluon-core
==0.8.3
autogluon-features
==0.8.3
black
<23.0,>=22.3
boto3
<2,>=1.10
datasets
<=2.20,>=2.18
defusedxml
<0.7.2,>=0.7.1
+ 33 more
1.1.0
minor
Apr 17, 2024
Released
Apr 17, 2024
License
Apache-2.0
Size
417.5 KB
Dependencies
(42)
accelerate
<0.22.0,>=0.21.0
autogluon-common
==1.1.0
autogluon-core
==1.1.0
autogluon-features
==1.1.0
black
~=23.0
boto3
<2,>=1.10
datasets
<2.15.0,>=2.10.0
defusedxml
<0.7.2,>=0.7.1
+ 34 more
1.0.0
major
Nov 30, 2023
Released
Nov 30, 2023
License
Apache-2.0
Size
406.9 KB
Dependencies
(42)
accelerate
<0.22.0,>=0.21.0
autogluon-common
==1.0.0
autogluon-core
==1.0.0
autogluon-features
==1.0.0
black
~=23.0
boto3
<2,>=1.10
datasets
<2.15.0,>=2.10.0
defusedxml
<0.7.2,>=0.7.1
+ 34 more
0.8.2
patch
Jun 30, 2023
Released
Jun 30, 2023
License
Apache-2.0
Size
363.6 KB
Dependencies
(41)
accelerate
<0.17,>=0.9
autogluon-common
==0.8.2
autogluon-core
==0.8.2
autogluon-features
==0.8.2
black
<23.0,>=22.3
boto3
<2,>=1.10
datasets
<=2.3.2,>=2.3.2
defusedxml
<0.7.2,>=0.7.1
+ 33 more
0.8.1
patch
Jun 29, 2023
Released
Jun 29, 2023
License
Apache-2.0
Size
363.6 KB
Dependencies
(42)
accelerate
<0.17,>=0.9
autogluon-common
==0.8.1
autogluon-core
==0.8.1
autogluon-features
==0.8.1
black
<23.0,>=22.3
boto3
<2,>=1.10
datasets
<=2.3.2,>=2.3.2
defusedxml
<0.7.2,>=0.7.1
+ 34 more
0.8.0
minor
Jun 16, 2023
Released
Jun 16, 2023
License
Apache-2.0
Size
363.5 KB
Dependencies
(43)
accelerate
<0.17,>=0.9
autogluon-common
==0.8.0
autogluon-core
==0.8.0
autogluon-features
==0.8.0
black
<23.0,>=22.3
boto3
<2,>=1.10
datasets
<=2.3.2,>=2.3.2
defusedxml
<0.7.2,>=0.7.1
+ 35 more
0.7.0
minor
Feb 17, 2023
Released
Feb 17, 2023
License
Apache-2.0
Size
323.3 KB
Dependencies
(41)
accelerate
<0.17,>=0.9
autogluon-common
==0.7.0
autogluon-core
==0.7.0
autogluon-features
==0.7.0
black
<23.0,>=22.3
boto3
<2,>=1.10
datasets
<=2.3.2,>=2.3.2
defusedxml
<0.7.2,>=0.7.1
+ 33 more
0.6.2
patch
Jan 11, 2023
Released
Jan 11, 2023
License
Apache-2.0
Size
296.2 KB
Dependencies
(41)
accelerate
<0.14,>=0.9
albumentations
<=1.2.0,>=1.1.0
autogluon-common
==0.6.2
autogluon-core
==0.6.2
autogluon-features
==0.6.2
black
>=22.3,~=22.0
boto3
datasets
<=2.3.2,>=2.3.2
+ 33 more
0.6.1
patch
Dec 13, 2022
Released
Dec 13, 2022
License
Apache-2.0
Size
282.9 KB
Dependencies
(39)
accelerate
<0.14,>=0.9
albumentations
<=1.2.0,>=1.1.0
autogluon-common
==0.6.1
autogluon-core
==0.6.1
autogluon-features
==0.6.1
black
>=22.3,~=22.0
boto3
datasets
<=2.3.2,>=2.3.2
+ 31 more
0.5.3
patch
Nov 19, 2022
Released
Nov 19, 2022
License
Apache-2.0
Size
145.9 KB
Dependencies
(29)
autogluon-common
==0.5.3
autogluon-core
==0.5.3
autogluon-features
==0.5.3
black
>=22.3,~=22.0
boto3
fairscale
<=0.4.6,>=0.4.5
nlpaug
<=1.1.10,>=1.1.10
nltk
<4.0.0,>=3.4.5
+ 21 more
0.6.0
minor
Nov 17, 2022
Released
Nov 17, 2022
License
Apache-2.0
Size
272.7 KB
Dependencies
(40)
accelerate
<0.14,>=0.9
albumentations
<=1.2.0,>=1.1.0
autogluon-common
==0.6.0
autogluon-core
==0.6.0
autogluon-features
==0.6.0
black
>=22.3,~=22.0
boto3
datasets
<=2.3.2,>=2.3.2
+ 32 more
0.5.2
patch
Jul 29, 2022
Released
Jul 29, 2022
License
Apache-2.0
Size
145.9 KB
Dependencies
(29)
autogluon-common
==0.5.2
autogluon-core
==0.5.2
autogluon-features
==0.5.2
black
>=22.3,~=22.0
boto3
fairscale
<=0.4.6,>=0.4.5
nlpaug
<=1.1.10,>=1.1.10
nltk
<4.0.0,>=3.4.5
+ 21 more
0.5.1
patch
1 CVE
GHSA-6h2x-4gjf-jc5w
Sep 21, 2022
autogluon.multimodal vulnerable to unsafe YAML deserialization
High
Impact
A potential unsafe deserialization issue exists within the autogluon.multimodal module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of untrusted data may allow an unprivileged third party to cause remote code execution, denial of service, and impact to both confidentiality and integrity.
Impacted versions: >=0.4.0;<0.4.3, >=0.5.0;<0.5.2.
Patches
The patches are included in autogluon.multimodal==0.4.3, autogluon.multimodal==0.5.2 and Deep Learning Containers 0.4.3 and 0.5.2.
Workarounds
Do not load data which originated from an untrusted source, or that could have been tampered with. Only load data you trust.
References
https://cwe.mitre.org/data/definitions/502.html
https://www.cvedetails.com/cve/CVE-2017-18342/
Affected versions
0.4.3b20220616
0.4.3b20220617
0.4.3b20220618
0.4.3b20220619
0.4.3b20220620
0.4.3b20220621
0.4.3b20220622
0.5.0
0.5.1
0.5.1b20220624
0.5.1b20220625
0.5.1b20220626
+ 32 more
Show less
0.5.1b20220627
0.5.1b20220628
0.5.1b20220629
0.5.1b20220630
0.5.1b20220701
0.5.1b20220702
0.5.1b20220703
0.5.1b20220704
0.5.1b20220705
0.5.1b20220706
0.5.1b20220707
0.5.1b20220708
0.5.1b20220709
0.5.1b20220710
0.5.1b20220711
0.5.1b20220712
0.5.1b20220713
0.5.1b20220714
0.5.1b20220715
0.5.1b20220716
0.5.1b20220717
0.5.1b20220718
0.5.2b20220719
0.5.2b20220720
0.5.2b20220721
0.5.2b20220722
0.5.2b20220723
0.5.2b20220724
0.5.2b20220725
0.5.2b20220726
0.5.2b20220727
0.5.2b20220728
Updated Dec 02, 2024 · Source: OSV.dev
Jul 19, 2022
Released
Jul 19, 2022
License
Apache-2.0
Size
145.9 KB
Dependencies
(29)
autogluon-common
==0.5.1
autogluon-core
==0.5.1
autogluon-features
==0.5.1
black
>=22.3,~=22.0
boto3
fairscale
<0.5.0,>=0.4.5
nlpaug
<=1.1.10,>=1.1.10
nltk
<4.0.0,>=3.4.5
+ 21 more
0.5.0
initial
1 CVE
GHSA-6h2x-4gjf-jc5w
Sep 21, 2022
autogluon.multimodal vulnerable to unsafe YAML deserialization
High
Impact
A potential unsafe deserialization issue exists within the autogluon.multimodal module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of untrusted data may allow an unprivileged third party to cause remote code execution, denial of service, and impact to both confidentiality and integrity.
Impacted versions: >=0.4.0;<0.4.3, >=0.5.0;<0.5.2.
Patches
The patches are included in autogluon.multimodal==0.4.3, autogluon.multimodal==0.5.2 and Deep Learning Containers 0.4.3 and 0.5.2.
Workarounds
Do not load data which originated from an untrusted source, or that could have been tampered with. Only load data you trust.
References
https://cwe.mitre.org/data/definitions/502.html
https://www.cvedetails.com/cve/CVE-2017-18342/
Affected versions
0.4.3b20220616
0.4.3b20220617
0.4.3b20220618
0.4.3b20220619
0.4.3b20220620
0.4.3b20220621
0.4.3b20220622
0.5.0
0.5.1
0.5.1b20220624
0.5.1b20220625
0.5.1b20220626
+ 32 more
Show less
0.5.1b20220627
0.5.1b20220628
0.5.1b20220629
0.5.1b20220630
0.5.1b20220701
0.5.1b20220702
0.5.1b20220703
0.5.1b20220704
0.5.1b20220705
0.5.1b20220706
0.5.1b20220707
0.5.1b20220708
0.5.1b20220709
0.5.1b20220710
0.5.1b20220711
0.5.1b20220712
0.5.1b20220713
0.5.1b20220714
0.5.1b20220715
0.5.1b20220716
0.5.1b20220717
0.5.1b20220718
0.5.2b20220719
0.5.2b20220720
0.5.2b20220721
0.5.2b20220722
0.5.2b20220723
0.5.2b20220724
0.5.2b20220725
0.5.2b20220726
0.5.2b20220727
0.5.2b20220728
Updated Dec 02, 2024 · Source: OSV.dev
Jun 23, 2022
Released
Jun 23, 2022
License
Apache-2.0
Size
138.0 KB
Dependencies
(27)
autogluon-common
==0.5.0
autogluon-contrib-nlp
==0.0.1b20220208
autogluon-core
==0.5.0
autogluon-features
==0.5.0
black
>=22.3,~=22.0
boto3
fairscale
<0.5.0,>=0.4.5
nlpaug
<2.0.0,>=1.1.10
+ 19 more
0.5.0rc1
pre
Jun 23, 2022
Released
Jun 23, 2022
License
Apache-2.0
Size
138.1 KB
Dependencies
(27)
autogluon-common
==0.5.0-rc1
autogluon-contrib-nlp
==0.0.1b20220208
autogluon-core
==0.5.0-rc1
autogluon-features
==0.5.0-rc1
black
>=22.3,~=22.0
boto3
fairscale
<0.5.0,>=0.4.5
nlpaug
<2.0.0,>=1.1.10
+ 19 more