584 matches found
PT-2026-49725
Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework affected versions not specified Description NVIDIA NeMo Framework contains a code injection flaw. A successful exploit could lead to arbitrary code execution, escalation of privileges, information disclosure, and data...
Security Bulletin: NVIDIA NeMo - June 2026
NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, clone or update this software to version 2.7.3 or later from the NVIDIA-NeMo/NeMo GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this...
PT-2026-49726
Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework for Linux affected versions not specified Description An issue exists where an attacker may cause deserialization of untrusted data. Deserialization is the process of converting a data stream back into an object. A...
CVE-2025-3000 vulnerabilities
Vulnerabilities for packages: py3-torch-cuda-13.0, py3-torch-cuda-12.8, py3-torch-cuda-12.6, open-webui, py3-torch-cuda-13.1, py3-torch-cuda-12.9, py3-torch-cuda-12.4, py3-torch-cuda-13.2, nemo, py3-torch-cuda-13.3...
GHSA-RRMF-RVHW-RF47 vulnerabilities
Vulnerabilities for packages: py3-torch-cuda-13.0, py3-torch-cuda-12.8, py3-torch-cuda-12.6, open-webui, py3-torch-cuda-13.1, py3-torch-cuda-12.9, py3-torch-cuda-12.4, py3-torch-cuda-13.2, nemo, py3-torch-cuda-13.3...
Malicious Package
Overview nemo-reporter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in nemo-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42a43ec0a345170ad191fa1c25bdd4000595aa8ce733c6b9c69de6b65a1defb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-4836 Malicious code in nemo-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42a43ec0a345170ad191fa1c25bdd4000595aa8ce733c6b9c69de6b65a1defb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview @not-nemo/crypto-tracker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
CVE-2026-24216
NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...
CVE-2026-41314 vulnerabilities
Vulnerabilities for packages: nemo, litellm, open-webui...
CVE-2026-41168 vulnerabilities
Vulnerabilities for packages: nemo, litellm, open-webui...
CVE-2026-41313 vulnerabilities
Vulnerabilities for packages: nemo, litellm, open-webui...
CVE-2026-41312 vulnerabilities
Vulnerabilities for packages: nemo, litellm, open-webui...
CVE-2026-41205 vulnerabilities
Vulnerabilities for packages: prefect-fips, mlflow, open-webui, dagster-fips, jupyter-base-notebook, airflow-core, superset, airflow, nemo, pgadmin4-fips, dagster...
CVE-2026-24222
NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandb...
CVE-2026-24222
NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandb...
CVE-2026-24222
NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandb...