fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +13 more potentially affected by CVE-2025-33226 via nemo-toolkit (>=0.10.1, <=2.4.0)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =1.0.3, =1.0.7 Source cves: CVE-2025-33226 Source advisory: MEND:CVE-2025-33226...

CVE-2025-33226

CVE-2025-33226 affects NVIDIA NeMo Framework for all platforms. The vulnerability allows code injection via malicious data created by an attacker, with potential outcomes including code execution, privilege escalation, information disclosure, and data tampering as described across multiple source...