nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-24159 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2026-24159 Source advisory: OSV:PYSEC-2026-2675...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-24157 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2026-24157 Source advisory: OSV:PYSEC-2026-2674...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2025-33253 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2025-33253 Source advisory: OSV:PYSEC-2026-2673...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2025-33245 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2025-33245 Source advisory: OSV:PYSEC-2026-2672...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-24159 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2026-24159 Source advisory: OSV:GHSA-V7V2-M736-CF3C...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-24157 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2026-24157 Source advisory: OSV:GHSA-M4JW-WGMF-889X...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2025-33253 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2025-33253 Source advisory: OSV:GHSA-HVJW-VP7G-39H5...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2025-33245 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2025-33245 Source advisory: OSV:GHSA-9379-MWVR-7WXX...

EUVD-2025-25828

Malicious code in bioql PyPI...

collie-lm (>=1.0.5, <=1.0.7), frankenstein-model (>=5.1.6, <=5.3.9) +13 more potentially affected by CVE-2025-23354 via megatron-core (>=0.2.0, <=0.10.0)

megatron-core PYPI version =0.2.0, =1.0.5, =5.1.6, =0.1.0, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.4.9 Source cves: CVE-2025-23354 Source advisory: SNYK:PYTHON-MEGATRONCORE-13110088...

collie-lm (>=1.0.5, <=1.0.7), frankenstein-model (>=5.1.6, <=5.3.9) +13 more potentially affected by CVE-2025-23353 via megatron-core (>=0.2.0, <=0.10.0)

megatron-core PYPI version =0.2.0, =1.0.5, =5.1.6, =0.1.0, =0.1.0, =1.0.0, =2.0.8, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.4.9 Source cves: CVE-2025-23353 Source advisory: MEND:CVE-2025-23353...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

Arbitrary Code Injection

Overview nemo-curator is a Scalable Data Preprocessing Tool for Training Large Language Models Affected versions of this package are vulnerable to Arbitrary Code Injection via the processing of malicious files. An attacker can execute arbitrary code, escalate privileges, access sensitive...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23307

CVE-2025-23307 affects NVIDIA NeMo Curator (all platforms). The vulnerability arises from processing maliciously crafted files, enabling arbitrary code execution via code injection, with potential for escalation of privileges, information disclosure, and data tampering. Public advisories in multi...

Security Bulletin: NVIDIA NeMo Curator - August 2025

NVIDIA has released a software update for NVIDIA® NeMo Curator To protect your system, download and install the latest NVIDIA Nemo Curator from NVIDIA Github. Go to NVIDIA Product Security...