nemo-curator (=0.5.1), neural-sync (>=0.1.0 <=0.1.2) +3 more potentially affected by CVE-2022-22821 via nemo-toolkit (>=1.23.0 <=1.5.1)

nemo-toolkit PYPI version =1.23.0, =0.1.0, =0.1.0, =0.0.1, =0.0.3, =0.0.4 Source cves: CVE-2022-22821 Source advisory: OSV:GHSA-RPX7-33J2-XX9X...

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

CVE-2022-22821

CVE-2022-22821 affects NVIDIA NeMo before 1.6.0, specifically the ASR WebApp component, where a Relative Path Traversal (../) could lead to deletion of arbitrary directories when an admin user is executing the web app. The vulnerability is triggered by insufficient input validation in the ASR Web...

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...