hydra-core
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Hydra legacy target blacklist permits unsafe PyYAML loading | hydra-core | PyPI | High | Fix reported | |
| Hydra logging configuration permits unsafe callable resolution | hydra-coreRed Hat Enterprise Linux AI (RHEL AI) 3/rhelai3/bootc-aws-cuda-rhel9 | PyPIRed Hat | High | Fix reported | |
| Hydra instantiate target blacklist bypasses permit code execution | hydra-coreRed Hat Enterprise Linux AI (RHEL AI) 3/rhelai3/bootc-aws-cuda-rhel9 | PyPIRed Hat | High | Fix reported | |
| Hydra: Mutable instantiate policy sets allow target blocklist bypass | hydra-coreRed Hat Enterprise Linux AI (RHEL AI) 3/rhelai3/bootc-aws-cuda-rhel9 | PyPIRed Hat | High | Fix reported | |
| Hydra: hydra.utils.instantiate with untrusted config can lead to code execution | hydra-core | PyPI | High | Fix reported |