{"id":"GHSA-rc39-g977-687w","summary":"Use of unclaimed s3 bucket in tests and examples","details":"### Impact\nPeople who use some older NLP examples that reference the old S3 bucket.\n\n### Patches\nThe problem has been patched. Upgrade to snapshots for now. A release will be published later to address this due to the  vulnerability mostly being examples and 1 class in the actual code base.\n\n### Workarounds\nDownload a word2vec google news vector from a new source using git lfs ","aliases":["CVE-2022-36022"],"modified":"2023-11-08T04:09:57.933172Z","published":"2022-11-10T21:27:55Z","database_specific":{"nvd_published_at":"2022-11-10T18:15:00Z","cwe_ids":["CWE-330","CWE-344"],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2022-11-10T21:27:55Z"},"references":[{"type":"WEB","url":"https://github.com/deeplearning4j/deeplearning4j/security/advisories/GHSA-rc39-g977-687w"},{"type":"WEB","url":"https://github.com/eclipse/deeplearning4j/security/advisories/GHSA-rc39-g977-687w"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36022"},{"type":"PACKAGE","url":"https://github.com/deeplearning4j/deeplearning4j"},{"type":"WEB","url":"https://github.com/mmihaltz/word2vec-GoogleNews-vectors"}],"affected":[{"package":{"name":"org.deeplearning4j:platform-tests","ecosystem":"Maven","purl":"pkg:maven/org.deeplearning4j/platform-tests"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.0.0-M2.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/11/GHSA-rc39-g977-687w/GHSA-rc39-g977-687w.json"}},{"package":{"name":"org.deeplearning4j:dl4j-examples","ecosystem":"Maven","purl":"pkg:maven/org.deeplearning4j/dl4j-examples"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.0.0-M2.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/11/GHSA-rc39-g977-687w/GHSA-rc39-g977-687w.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}]}