CVE-2024-6507
- Source
- https://cve.org/CVERecord?id=CVE-2024-6507
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6507.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-6507
- Published
- 2024-07-04T11:58:21Z
- Modified
- 2026-10-28T02:30:46Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Deep Lake Kaggle command injection
- Details
-
Command injection when ingesting a remote Kaggle dataset due to a lack of input sanitization in the ingest_kaggle() API
- Database specific
{ "cna_assigner": "JFROG", "cwe_ids": [ "CWE-78" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6507.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6507.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-6507
- https://research.jfrog.com/vulnerabilities/deeplake-kaggle-command-injection-jfsa-2024-001035320/
- https://github.com/activeloopai/deeplake/pull/2876
- https://pypi.org/project/pip
Affected packages
Git / github.com/activeloopai/deeplake
Affected ranges
- Type
- GIT
- Repo
- https://github.com/activeloopai/deeplake
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0" }, { "last_affected": "3.9.10" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" } ] }
Affected versions
2.*
2.0.1
2.0a0
v2.*
v2.0-alpha
v2.0.1-alpha
v2.0.10
v2.0.11
v2.0.12
v2.0.13
v2.0.2
v2.0.3
v2.0.4
v2.0.5
v2.0.6
v2.0.7
v2.0.8
v2.0.9
v2.1.0
v2.1.1
v2.2.1.0
v2.2.2
v2.2.3
v2.2.4
v2.3.0
v2.3.1
v2.3.2
v2.3.3
v2.3.4
v2.3.5
v2.4.0
v2.4.1
v2.4.2
v2.4.3
v2.5.0
v2.5.1
v2.5.2
v2.6.0
v2.7.0
v2.7.1
v2.7.2
v2.7.3
v2.7.4
v2.7.5
v2.8.0
v2.8.1
v2.8.3
v2.8.4
v2.8.5
v3.*
v3.0.10
v3.0.11
v3.0.12
v3.0.13
v3.0.14
v3.0.15
v3.0.16
v3.0.17
v3.0.18
v3.0.19
v3.0.5
v3.0.6
v3.0.7
v3.0.8
v3.0.9
v3.1.0
v3.1.1
v3.1.10
v3.1.11
v3.1.12
v3.1.2
v3.1.3
v3.1.4
v3.1.5
v3.1.6
v3.1.7
v3.1.8
v3.1.9
v3.2.1
v3.2.10
v3.2.11
v3.2.12
v3.2.13
v3.2.14
v3.2.15
v3.2.16
v3.2.17
v3.2.18
v3.2.19
v3.2.2
v3.2.20
v3.2.21
v3.2.22
v3.2.3
v3.2.4
v3.2.5
v3.2.6
v3.2.7
v3.2.8
v3.2.9
v3.3.0
v3.3.1
v3.3.2
v3.4.0
v3.4.1
v3.4.2
v3.4.3
v3.4.4
v3.5.0
v3.5.1
v3.5.2
v3.5.3
v3.5.4
v3.6.0
v3.6.1
v3.6.10
v3.6.11
v3.6.12
v3.6.13
v3.6.14
v3.6.15
v3.6.16
v3.6.17
v3.6.18
v3.6.19
v3.6.2
v3.6.20
v3.6.21
v3.6.22
v3.6.23
v3.6.24
v3.6.25
v3.6.26
v3.6.27
v3.6.3
v3.6.4
v3.6.5
v3.6.6
v3.6.7
v3.6.8
v3.6.9
v3.7.1
v3.7.2
v3.8.0
v3.8.1
v3.8.10
v3.8.11
v3.8.12
v3.8.13
v3.8.14
v3.8.15
v3.8.16
v3.8.17
v3.8.18
v3.8.19
v3.8.2
v3.8.20
v3.8.21
v3.8.22
v3.8.23
v3.8.24
v3.8.25
v3.8.26
v3.8.27
v3.8.3
v3.8.4
v3.8.5
v3.8.6
v3.8.7
v3.8.8
v3.8.9
v3.9.0
v3.9.1
v3.9.10
v3.9.2
v3.9.3
v3.9.4
v3.9.5
v3.9.6
v3.9.7
v3.9.8
v3.9.9