CVE-2024-4642 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2024-21503 vulnerabilities

Vulnerabilities for packages: nemo...

nemo-toolkit (1.0.0rc1) potentially affected by CVE-2024-8020 via pytorch-lightning (1.1.5)

pytorch-lightning PYPI version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - nemo-toolkit 1.0.0rc1 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

nemo-toolkit (1.1.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.7.post0)

pytorch-lightning PYPI version 1.3.7.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - nemo-toolkit 1.1.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

nemo-toolkit (1.1.0) potentially affected by CVE-2024-8019 via pytorch-lightning (1.3.7.post0)

pytorch-lightning PYPI version 1.3.7.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - nemo-toolkit 1.1.0 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

nemo-toolkit (1.0.0rc1) potentially affected by CVE-2024-8019 via pytorch-lightning (1.1.5)

pytorch-lightning PYPI version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - nemo-toolkit 1.0.0rc1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

CVE-2025-23360

CVE-2025-23360 affects the NVIDIA NeMo Framework. The vulnerability allows a relative path traversal via arbitrary file write, which could lead to code execution and data tampering. Reported CVSS metrics indicate a high-severity impact (base 9.8 in NVD with network attack vector) and substantial ...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

NVIDIA Nemo Framework security vulnerabilities

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A security vulnerability exists in NVIDIA Nemo Framework that originates from relative path traversal and could lead to code execution and data tampering...

Security Bulletin: NVIDIA NeMo - March 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, download and install the latest release from the NeMo-Framework-Launcher Releases page on GitHub. Go to NVIDIA Product Security...

PT-2025-19321

Уязвимость комплексной платформы для тренировки и применения нейронных сетей в области обработки речи и естественного языка NVIDIA NeMo связана с ошибками в обработке относительного пути к каталогу. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

CVE-2025-23360: Relative Path Traversal

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

PT-2025-10899

Name of the Vulnerable Software and Affected Versions: NVIDIA Nemo Framework affected versions not specified Description: The issue is related to a relative path traversal problem caused by arbitrary file write, which could lead to code execution and data tampering. Recommendations: At the moment...

CVE-2025-27516 vulnerabilities

Vulnerabilities for packages: jupyter-docker-stacks, text-generation-inference, reflex, jupyter-base-notebook, openstack-kolla-toolbox-2025.1, openstack-kolla-toolbox-2025.1-fips, tensorflow-cpu-jupyter, nemo, checkov...

GHSA-CPWX-VRP4-4PQ7 vulnerabilities

Vulnerabilities for packages: jupyter-docker-stacks, text-generation-inference, reflex, jupyter-base-notebook, openstack-kolla-toolbox-2025.1, openstack-kolla-toolbox-2025.1-fips, tensorflow-cpu-jupyter, nemo, checkov...