Malicious code in @taktikangea/nemo-deleniti-vitae (npm)

The package @taktikangea/nemo-deleniti-vitae was found to contain malicious code...

Malicious code in @teamteanpm2024/placeat-nemo-rerum (npm)

The package @teamteanpm2024/placeat-nemo-rerum was found to contain malicious code...

Malicious code in @crabas0npm/rem-atque-nemo (npm)

The package @crabas0npm/rem-atque-nemo was found to contain malicious code...

Malicious code in @crabas0npm/nemo-natus-dolor-officia (npm)

The package @crabas0npm/nemo-natus-dolor-officia was found to contain malicious code...

Malicious code in @crabas0npm/nemo-sapiente-iste (npm)

The package @crabas0npm/nemo-sapiente-iste was found to contain malicious code...

MAL-2025-9640 Malicious code in @waitfortea2024/nemo-nisi-sint (npm)

The package @waitfortea2024/nemo-nisi-sint was found to contain malicious code...

MAL-2025-7785 Malicious code in @diotobtea/nemo-nihil-aut (npm)

The package @diotobtea/nemo-nihil-aut was found to contain malicious code...

MAL-2025-7714 Malicious code in @crabas0npm2/reprehenderit-dolor-nemo (npm)

The package @crabas0npm2/reprehenderit-dolor-nemo was found to contain malicious code...

MAL-2025-7244 Malicious code in @crabas0npm/dignissimos-inventore-nemo (npm)

The package @crabas0npm/dignissimos-inventore-nemo was found to contain malicious code...

MAL-2025-7519 Malicious code in @crabas0npm/rem-atque-nemo (npm)

The package @crabas0npm/rem-atque-nemo was found to contain malicious code...

MAL-2025-9403 Malicious code in @taktikangea/blanditiis-nemo (npm)

The package @taktikangea/blanditiis-nemo was found to contain malicious code...

MAL-2025-7404 Malicious code in @crabas0npm/nemo-error-dolore (npm)

The package @crabas0npm/nemo-error-dolore was found to contain malicious code...

MAL-2025-7918 Malicious code in @erboladaiteas/recusandae-possimus-blanditiis-nemo (npm)

The package @erboladaiteas/recusandae-possimus-blanditiis-nemo was found to contain malicious code...

CVE-2025-23304

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

CVE-2025-23303

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23303

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23304

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

Deserialization of Untrusted Data

Overview nemo-toolkit is a NeMo - a toolkit for Conversational AI Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the deserialization of untrusted data. An attacker can execute arbitrary code and tamper with data by providing specially crafted input th...

Directory Traversal

Overview nemo-toolkit is a NeMo - a toolkit for Conversational AI Affected versions of this package are vulnerable to Directory Traversal via the model loading process. An attacker can execute arbitrary code and tamper with data by supplying a .nemo file containing maliciously crafted metadata...

CVE-2025-23304

CVE-2025-23304 affects the NVIDIA NeMo library (model loading component). The vulnerability arises from loading .nemo files with maliciously crafted metadata, enabling code injection that may lead to remote code execution and data tampering. Affected: NVIDIA NeMo library (model loading). Exploita...