Snyk Security Database

Affected versions of this package are vulnerable to Exposed Dangerous Method or Function in the Code node when running in legacy JavaScript execution mode. An attacker can access or modify files on the host system with the same privileges as the application process by invoking internal helper functions from within the node. This is only exploitable if the instance is self-hosted, the legacy execution mode is enabled, and the attacker has authenticated workflow editing access.

Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the torch.load function. An attacker can execute arbitrary code by providing a specially crafted model file that is loaded without proper security parameters.

Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the GetAsanaObject processor, which uses generic Java object serialization and deserialization without filtering. An attacker can execute arbitrary code by supplying crafted serialized objects to the configured cache server.

Note: This is only exploitable if the system is running with the GetAsanaObject processor and the attacker has direct access to the configured cache server.