MAL-2025-3073 Malicious code in nemo-dast-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ea0189209023ae2d04586bfbc3d791022f0fa6052dee65ec03832a80ce67a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-27318 vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-WHH8-FJGC-QP73 vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-H8WV-9H96-M4HR vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-FJ7X-Q9J7-G6Q6 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2024-27319 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2024-4642 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2024-21503 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

CVE-2025-23360

CVE-2025-23360 affects the NVIDIA NeMo Framework. The vulnerability allows a relative path traversal via arbitrary file write, which could lead to code execution and data tampering. Reported CVSS metrics indicate a high-severity impact (base 9.8 in NVD with network attack vector) and substantial ...

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

NVIDIA Nemo Framework 安全漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A security vulnerability exists in NVIDIA Nemo Framework that originates from relative path traversal and could lead to code execution and data tampering...

Security Bulletin: NVIDIA NeMo - March 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, download and install the latest release from the NeMo-Framework-Launcher Releases page on GitHub. Go to NVIDIA Product Security...

CVE-2025-27516 vulnerabilities

Vulnerabilities for packages: py3.11-torchvision-cuda-12.3, py3.10-torchvision-cuda-12.3, grafana-oncall, jupyter-base-notebook, checkov, py3.9-torchvision-cuda-11.8, reflex, tensorflow-cpu-jupyter, text-generation-inference, py3-torchvision-cuda-11.8, py3.9-torchvision-cuda-12.3,...

GHSA-CPWX-VRP4-4PQ7 vulnerabilities

Vulnerabilities for packages: py3.11-torchvision-cuda-12.3, py3.10-torchvision-cuda-12.3, grafana-oncall, jupyter-base-notebook, checkov, py3.9-torchvision-cuda-11.8, reflex, tensorflow-cpu-jupyter, text-generation-inference, py3-torchvision-cuda-11.8, py3.9-torchvision-cuda-12.3,...

CVE-2022-21129

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...