CVE-2021-39158

2021-08-2321:15:09

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.8%

JSON

NVCaffe’s python required dependencies list used to contain gfortranversion prior to 0.17.4, entry which does not exist in the repository pypi.org. An attacker could potentially have posted malicious files to pypi.org causing a user to install it within NVCaffe.

CPENameOperatorVersion
caffeeq0.14.0-rc.2
caffeeq0.14.1
caffeeq0.17.1
caffeeq0.16.4
caffeeq0.16.6
caffeeq0.14.2
caffeeq0.12.1
caffeeq0.15.5
caffeeq0.15.7
caffeeq0.10.0