📦 Horovod

Horovod versions up to v0.28.1 are vulnerable to unauthenticated remote code execution via malicious pickle objects in PUT requests. Attackers can execute arbitrary code on servers running vulnerable ...

CVE-2022-0315 is an insecure temporary file vulnerability in Horovod, a distributed deep learning framework. It allows local attackers to create or overwrite arbitrary files via symlink attacks due to...