CVE-2025-23251

CVE-2025-23251 (NVIDIA NeMo Framework) involves a code-generation control weakness that could allow remote code execution, with potential data tampering. Multiple sources (NVD, NVIDIA security bulletin, Red Hat, PT Security) confirm the flaw and its impact, describing an attacker who could execut...

CVE-2025-23251

NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23250

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23250

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23250

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23250

CVE-2025-23250 – NVIDIA NeMo Framework : A path traversal vulnerability exists in NVIDIA NeMo Framework from an improper limitation of a pathname to a restricted directory, enabling an arbitrary file write. Reports across multiple sources (NVD, Red Hat, Alpine, CNNVD, PT-Security, and NVIDIA advi...

CVE-2025-23249

NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23249

NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23249

CVE-2025-23249 (NVIDIA NeMo Framework) : The vulnerability allows deserialization of untrusted data leading to remote code execution, with potential code execution and data tampering. Affected software is the NVIDIA NeMo Framework (versions prior to 25.02); remediation guidance in connected docs ...

CVE-2025-23249

NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

NVIDIA Nemo Framework 代码注入漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code injection vulnerability exists in NVIDIA Nemo Framework, which stems from improper code generation controls that could lead to remote code execution and data tampering...

NVIDIA Nemo Framework 路径遍历漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A path traversal vulnerability exists in NVIDIA Nemo Framework, which stems from an improper pathname restriction that could lead to arbitrary file writes and code execution...

NVIDIA Nemo Framework 代码问题漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code issue vulnerability exists in the NVIDIA Nemo Framework, which stems from the fact that deserializing untrusted data could lead to remote code execution and data tampering...

PT-2025-17548

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework versions prior to 25.02 Description The NVIDIA NeMo Framework contains a vulnerability that allows a user to deserialize untrusted data through remote code execution. A successful exploit of this issue might lead to code...

PT-2025-17550 · Nvidia · Nvidia Nemo Framework

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo Framework affected versions not specified Description: The issue is related to improper control of code generation, which could be exploited through remote code execution. A successful exploit might lead to code execution and data...

PT-2025-17549

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework affected versions not specified Description The issue is related to an improper limitation of a pathname to a restricted directory by an arbitrary file write, which could lead to code execution and data tampering...

Security Bulletin: NVIDIA NeMo - April 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, download and install the latest release from NVIDIA GitHub. Go to NVIDIA Product Security...

CVE-2024-8020 vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-98FP-7V67-4V3Q vulnerabilities

Vulnerabilities for packages: nemo...

Malicious code in nemo-dast-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ea0189209023ae2d04586bfbc3d791022f0fa6052dee65ec03832a80ce67a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...