626 matches found
CVE-2026-108961
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961 PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
EUVD-2026-98276
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961
A code injection vulnerability exists in PaddlePaddle PaddleX versions up to 3.7.2 . The flaw is located in the NormalizeImage.__init__ function within the paddlex/inference/models/text_detection/processors.py file of the Preprocessor component. Attackers can exploit this by manipulating the scal...
CVE-2026-108961 PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961: Improper Control of Generation of Code
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2024-1603 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2024-1603...
PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file
paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...
PYSEC-2026-1755 PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file
paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...
aait (>=1.0.4, <=1.0.5), arcoocr (1.0.1) +32 more potentially affected by CVE-2024-0815 via paddlepaddle (2.6.2)
paddlepaddle PYPI version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - aait =1.0.4, =0.2.2.15, =0.1.21, =0.1.0, =0.0.1, =0.0.1a0, =5.1.6, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2024-0815 Source...
PaddlePaddle command injection in paddle.utils.download._wget_download
Command injection in paddle.utils.download.wgetdownload bypass filter in paddlepaddle/paddle 2.6.0...
PaddlePaddle command injection vulnerability
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...
aait (>=1.0.4, <=1.0.5), arcoocr (1.0.1) +32 more potentially affected by CVE-2024-0817 via paddlepaddle (2.6.2)
paddlepaddle PYPI version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - aait =1.0.4, =0.2.2.15, =0.1.21, =0.1.0, =0.0.1, =0.0.1a0, =5.1.6, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2024-0817 Source...
PYSEC-2026-1756 PaddlePaddle command injection in paddle.utils.download._wget_download
Command injection in paddle.utils.download.wgetdownload bypass filter in paddlepaddle/paddle 2.6.0...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2024-0817 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2024-0817...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2024-0815 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2024-0815...
PYSEC-2026-1754 PaddlePaddle command injection vulnerability
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2024-0521 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2024-0521...
PYSEC-2026-444 Code Injection in paddlepaddle
The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...
Code Injection in paddlepaddle
The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...