Facebook ParlAI version 1.0.0 suffers from a deserialization vulnerability that can allow for code execution.
9da634b02b722fa3af05ba67e9c19879fb1f0cd3947fbdb6dd88459cdf7aac56
Cabot version 0.11.12 suffers from a persistent cross site scripting vulnerability.
b48bcc95a0fa44e864eba57231f2d1b1d8bda5a46716c0cac0690f14dd4623bf