一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月23日

CVE-2026-95928 [MEDIUM] – A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This im

未分类
📑 文章目录

A security flaw has been discovered in recommenders-team recommenders up to 1.2.1. This impacts the function pickle.load of the file recommenders/models/newsrec/io/mind_iterator.py of the component Dict Loading. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.