cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2025-12058 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2025-12058 Source advisory: OSV:GHSA-MQ84-HJQX-CWF2...

EUVD-2021-25055

Malware in sbrugna...

EUVD-2021-25057

Malware in sbrugna...

EUVD-2021-25056

Malware in sbrugna...

EUVD-2025-13322

Malicious code in bioql PyPI...

EUVD-2022-7422

Malicious code in bioql PyPI...

adaseq (>=0.4.0, <=0.6.3), aipalette-nlp (>=0.0.9, <=0.1.0) +209 more potentially affected by CVE-2025-55558 via torch (1.12.1)

torch PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - adaseq =0.4.0, =0.0.9, =1.0.0, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.1.1 and more Source cves: CVE-2025-55558 Source advisory:...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2025-6921 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2025-6921 Source advisory: OSV:GHSA-4W7R-H757-3R74...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2025-6921 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2025-6921 Source advisory: OSV:GHSA-4W7R-H757-3R74...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2025-9906 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2025-9906 Source advisory: OSV:GHSA-36FQ-JGMW-4R9C...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2025-6051 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2025-6051 Source advisory: OSV:GHSA-RCV9-QM8P-9P6J...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2025-6051 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2025-6051 Source advisory: OSV:GHSA-RCV9-QM8P-9P6J...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2025-6638 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2025-6638 Source advisory: OSV:GHSA-59P9-H35M-WG4G...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2025-6638 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2025-6638 Source advisory: OSV:GHSA-59P9-H35M-WG4G...

CVE-2025-23313

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

CVE-2025-23314

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

CVE-2025-23314

CVE-2025-23314 affects NVIDIA NeMo Framework (NLP component). Exploitation could allow code injection with potential code execution, privilege escalation, data tampering, and information disclosure. Affected is the NeMo Framework across platforms; root cause not detailed in provided documents. Ex...

CVE-2025-23314

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

CVE-2025-23313

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

CVE-2025-23313: Improper Control of Generation of Code

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...