VDB
Sign up
—

PYSEC-2022-175

Quick fix

PYSEC-2022-175 — horovod: upgrade to the fixed version with the command below.

pip install --upgrade 'horovod>=b96ecae4dc69fc0a83c7c2d3f1dde600c20a1b41'

Details

Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/horovod
Introduced in: 0Fixed in: b96ecae4dc69fc0a83c7c2d3f1dde600c20a1b41
Fixpip install --upgrade 'horovod>=b96ecae4dc69fc0a83c7c2d3f1dde600c20a1b41'

References