zlei6/ragflow
1
0
Fork 0
mirror of https://github.com/infiniflow/ragflow.git synced 2026-07-05 10:58:34 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
140dd2c8cc196cfeaad4645912cdabd0cda9db21
ragflow/deepdoc/vision/operators.py
Rin 651d9fff9f security: replace unsafe eval with ast.literal_eval in vision operators (#12236) 
Addresses a potential RCE vulnerability in NormalizeImage by using
ast.literal_eval for safer string parsing.

---------

Co-authored-by: Kevin Hu <kevinhu.sh@gmail.com>
2025-12-29 13:28:09 +08:00

24 KiB
Raw Blame History

View Raw
Reference in New Issue View Git Blame Copy Permalink