datachain-ai/datachain

datachain-ai/datachain

GitHubGitHub
GitHubgithub.com
docs.datachain.aidocs.datachain.ai
Releases261
Frequency2 days 15 hours
Last Release
Stars2.78K
The Context Layer for unstructured data: typed, versioned datasets over S3, GCS, Azure
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-61677↗
2.5 LOW—

DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables (such as DATACHAIN__METASTORE and DATACHAIN__WAREHOUSE) in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads. This issue is fixed in version 0.34.2.