CVE-2024-0521

creationtimestamp| type| source ---|---|--- 2024-01-20 22:21:43+00:00| seen| https://t.me/ctinow/170735 2024-02-15 23:31:36+00:00| seen| https://t.me/ctinow/185972...

paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2024-0521 via paddlepaddle (=1.8.5)

paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves: CVE-2024-05...

CVE-2024-0521

Code Injection in paddlepaddle/paddle...

CVE-2024-0521 Code Injection in paddlepaddle/paddle

Code Injection in paddlepaddle/paddle...

CVE-2024-0521

CVE-2024-0521 refers to a Code Injection in paddlepaddle/paddle caused by how the url parameter is incorporated into the command string without proper validation or sanitization. Public descriptions (Veracode, GHSA, OSV, and related records) indicate the issue stems from the url being embedded in...