megatron-bridge (>=0.1.0rc0, <=0.3.1), nemo-eval (>=0.1.0rc1, <=0.2.0rc0) +1 more potentially affected by CVE-2025-33225 via nvidia-resiliency-ext (>=0.3.0, <=0.4.1)

nvidia-resiliency-ext PYPI version =0.3.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.2.0rc1 Source cves: CVE-2025-33225 Source advisory: SNYK:PYTHON-NVIDIARESILIENCYEXT-14459109...

nemo-eval (>=0.1.0rc1, <=0.1.0rc2), nemo-export-deploy (>=0.1.0, <=0.2.0rc1) potentially affected by CVE-2025-33235 via nvidia-resiliency-ext (0.3.0)

nvidia-resiliency-ext PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-resiliency-ext and may be impacted: - nemo-eval =0.1.0rc1, =0.1.0, =0.2.0rc1 Source cves: CVE-2025-33235 Source advisory:...

megatron-bridge (>=0.1.0rc0, <=0.3.1), nemo-eval (>=0.1.0rc1, <=0.2.0rc0) +1 more potentially affected by CVE-2025-33235 via nvidia-resiliency-ext (>=0.3.0, <=0.4.1)

nvidia-resiliency-ext PYPI version =0.3.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.2.0rc1 Source cves: CVE-2025-33235 Source advisory: MEND:CVE-2025-33235...

megatron-bridge (>=0.1.0rc0, <=0.3.1), nemo-eval (>=0.1.0rc1, <=0.2.0rc0) +1 more potentially affected by CVE-2025-33225 via nvidia-resiliency-ext (>=0.3.0, <=0.4.1)

nvidia-resiliency-ext PYPI version =0.3.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.2.0rc1 Source cves: CVE-2025-33225 Source advisory: MEND:CVE-2025-33225...

EUVD-2025-25827

Malicious code in bioql PyPI...

CVE-2025-23315

NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information...

PT-2025-34806 · Nvidia · Nvidia Nemo Framework

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo Framework affected versions not specified Description: The NVIDIA NeMo Framework contains an issue in the export and deploy component that could allow an attacker to inject code via malicious data. A successful exploit may lead to...