ovos-tts-plugin-deepponies (>=0.0.1, <=0.0.2) potentially affected by CVE-2022-22821 via nemo-toolkit (1.5.1)

nemo-toolkit PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - ovos-tts-plugin-deepponies =0.0.1, =0.0.2 Source cves: CVE-2022-22821 Source advisory: OSV:PYSEC-2026-685...

variantworks (>=0.1.0.dev201117, <=0.1.0.dev210511) potentially affected by CVE-2022-22821 via nemo-toolkit (0.10.1)

nemo-toolkit PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - variantworks =0.1.0.dev201117, =0.1.0.dev210511 Source cves: CVE-2022-22821 Source advisory: OSV:PYSEC-2026-685...

variantworks (>=0.1.0.dev201117, <=0.1.0.dev210511) potentially affected by CVE-2022-22821 via nemo-toolkit (0.10.1)

nemo-toolkit PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - variantworks =0.1.0.dev201117, =0.1.0.dev210511 Source cves: CVE-2022-22821 Source advisory: OSV:GHSA-RPX7-33J2-XX9X...

variantworks (>=0.1.0.dev201117, <=0.1.0.dev210511) potentially affected by CVE-2022-22821 via nemo-toolkit (0.10.1)

nemo-toolkit PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - variantworks =0.1.0.dev201117, =0.1.0.dev210511 Source cves: CVE-2022-22821 Source advisory: OSV:GHSA-9HG3-HMMF-C3GR...

ovos-tts-plugin-deepponies (>=0.0.1, <=0.0.2) potentially affected by CVE-2022-22821 via nemo-toolkit (1.5.1)

nemo-toolkit PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - ovos-tts-plugin-deepponies =0.0.1, =0.0.2 Source cves: CVE-2022-22821 Source advisory: GHSA-9HG3-HMMF-C3GR...

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

CVE-2022-22821

CVE-2022-22821 affects NVIDIA NeMo before 1.6.0, specifically the ASR WebApp component, where a Relative Path Traversal (../) could lead to deletion of arbitrary directories when an admin user is executing the web app. The vulnerability is triggered by insufficient input validation in the ASR Web...