wandb/weave

wandb/weave

GitHubGitHub
GitHubgithub.com
wandb.mewandb.me
Releases452
Frequency2 days 23 hours
Last Release
Stars1.1K
Weave is a toolkit for developing AI-powered applications, built by Weights & Biases.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-7340↗
8.8 HIGH—

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin.