Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
modelscope/ms-swift
main @ 99c3ab1
1
Fixes
2
CVEs
CRITICAL
Peak severity
Highlights
Insecure Deserialization: 1 prior fix. Scrutinize any change in this area.
tests/run.py: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Insecure Deserialization: The application used pickle.load() on untrusted .mdl files during model training, allowing remote attackers to execute arbitrary code by supplying malicious model files.
Insecure Deserialization: Test run configurations were loaded using yaml.load with FullLoader, enabling remote code execution via malicious YAML configurations. This was mitigated by adopting yaml.safe_load.
Use of a Broken or Risky Cryptographic Algorithm: Weak hashing mechanisms in the PIL Image Cache Key Handler allow local attackers to exploit predictable cache keys, exposing a collision risk under high-complexity local access scenarios.