kwikapi-django (>=0.2.6, <=0.2.8), nemo (>=1.14.4, <=1.21.1) +1 more potentially affected by CVE-2022-36359 +1 more via django (1.11.23)

django PYPI version 1.11.23 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kwikapi-django =0.2.6, =1.14.4, =1.21.1 - pyblue 2022.8.1 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory: OSV:GHSA-8X94-HMJH-97HQ...

koalix-crm (1.12.1), nemo (1.14.1) potentially affected by CVE-2022-36359 +1 more via django (1.11.21)

django PYPI version 1.11.21 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - koalix-crm 1.12.1 - nemo 1.14.1 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory: OSV:GHSA-8X94-HMJH-97HQ...

bugdoc (0.1.0), nemo (1.23.0) +1 more potentially affected by CVE-2022-36359 +1 more via django (1.11.28)

django PYPI version 1.11.28 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - bugdoc 0.1.0 - nemo 1.23.0 - pyxon 0.0.1 Source cves: CVE-2022-36359, CVE-2022-45442 Source advisory: OSV:GHSA-8X94-HMJH-97HQ...

Arbitrary file deletion in NeMo ASR webapp

Description NVIDIA NeMo contains a vulnerability in ASR WebApp, where Relative Path Traversal CWE-23 may lead to deletion of any directory through the "../" structure when admin privileges are available. CVSS Score = 2.0...

GHSA-RPX7-33J2-XX9X Arbitrary file deletion in NeMo ASR webapp

Description NVIDIA NeMo contains a vulnerability in ASR WebApp, where Relative Path Traversal CWE-23 may lead to deletion of any directory through the "../" structure when admin privileges are available. CVSS Score = 2.0...

variantworks (>=0.1.0.dev201117, <=0.1.0.dev210511) potentially affected by CVE-2022-22821 via nemo-toolkit (0.10.1)

nemo-toolkit PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - variantworks =0.1.0.dev201117, =0.1.0.dev210511 Source cves: CVE-2022-22821 Source advisory: OSV:GHSA-RPX7-33J2-XX9X...

ovos-tts-plugin-deepponies (>=0.0.1, <=0.0.2) potentially affected by CVE-2022-22821 via nemo-toolkit (1.5.1)

nemo-toolkit PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - ovos-tts-plugin-deepponies =0.0.1, =0.0.2 Source cves: CVE-2022-22821 Source advisory: OSV:GHSA-RPX7-33J2-XX9X...

ovos-tts-plugin-deepponies (>=0.0.1, <=0.0.2) potentially affected by unknown CVE via nemo-toolkit (1.5.1)

nemo-toolkit PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - ovos-tts-plugin-deepponies =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: GHSA-RPX7-33J2-XX9X...

Path Traversal in nemo-toolkit

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

ovos-tts-plugin-deepponies (>=0.0.1, <=0.0.2) potentially affected by CVE-2022-22821 via nemo-toolkit (1.5.1)

nemo-toolkit PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - ovos-tts-plugin-deepponies =0.0.1, =0.0.2 Source cves: CVE-2022-22821 Source advisory: GHSA-9HG3-HMMF-C3GR...

GHSA-9HG3-HMMF-C3GR Path Traversal in nemo-toolkit

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

variantworks (>=0.1.0.dev201117, <=0.1.0.dev210511) potentially affected by CVE-2022-22821 via nemo-toolkit (0.10.1)

nemo-toolkit PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - variantworks =0.1.0.dev201117, =0.1.0.dev210511 Source cves: CVE-2022-22821 Source advisory: OSV:GHSA-9HG3-HMMF-C3GR...

ovos-tts-plugin-deepponies (>=0.0.1, <=0.0.2) potentially affected by CVE-2022-22821 via nemo-toolkit (1.5.1)

nemo-toolkit PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - ovos-tts-plugin-deepponies =0.0.1, =0.0.2 Source cves: CVE-2022-22821 Source advisory: OSV:GHSA-9HG3-HMMF-C3GR...

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

Path traversal

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

NVIDIA NeMo path traversal vulnerability

Nvidia NeMo is a toolkit for building new state-of-the-art conversational Ai models from Nvidia, USA. A security vulnerability exists in versions of NVIDIA NeMo prior to 1.6.0 that could result in the deletion of any directory when administrator privileges are available...

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

ovos-tts-plugin-deepponies (>=0.0.1, <=0.0.2), variantworks (>=0.1.0.dev201117, <=0.1.0.dev210511) potentially affected by CVE-2022-22821 via nemo-toolkit (>=0.10.1, <=1.5.1)

nemo-toolkit PYPI version =0.10.1, =0.0.1, =0.1.0.dev201117, =0.1.0.dev210511 Source cves: CVE-2022-22821 Source advisory: MEND:CVE-2022-22821...

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

CVE-2022-22821

CVE-2022-22821 affects NVIDIA NeMo before 1.6.0, specifically the ASR WebApp component, where a Relative Path Traversal (../) could lead to deletion of arbitrary directories when an admin user is executing the web app. The vulnerability is triggered by insufficient input validation in the ASR Web...