Upgrade Now: AWS Fixes DJL Vulnerability with Version 0.28.0

AWS is aware of CVE-2024-37902 affecting DeepJavaLibrary. Upgrade to version 0.28.0 or higher to resolve this issue.

Hot Take:

So, it turns out your AI’s favorite hobby might just be ziplining straight into trouble! AWS swoops in to save the day with a shiny new version, because who knew deep learning could go so deep into the archives?

Key Points:

  • AWS identified a vulnerability, CVE-2024-37902, in the archive extraction utilities of DeepJavaLibrary (DJL).
  • The issue affects versions 0.1.0 through 0.27.0 of DJL.
  • AWS released version 0.28.0 on May 15, 2024, to fix this vulnerability.
  • Users are strongly recommended to upgrade to version 0.28.0 or higher.
  • Additional information is available in the DJL release notes.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here