nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2025-33245 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2025-33245 Source advisory: OSV:GHSA-9379-MWVR-7WXX...

ovos-tts-plugin-deepponies (>=0.0.1, <=0.0.2) potentially affected by CVE-2025-33245 via nemo-toolkit (1.5.1)

nemo-toolkit PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - ovos-tts-plugin-deepponies =0.0.1, =0.0.2 Source cves: CVE-2025-33245 Source advisory: OSV:GHSA-9379-MWVR-7WXX...

variantworks (>=0.1.0.dev201117, <=0.1.0.dev210511) potentially affected by CVE-2025-33245 via nemo-toolkit (0.10.1)

nemo-toolkit PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - variantworks =0.1.0.dev201117, =0.1.0.dev210511 Source cves: CVE-2025-33245 Source advisory: OSV:GHSA-9379-MWVR-7WXX...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +8 more potentially affected by CVE-2025-33245 via nemo-toolkit (>=2.0.0rc0, <=2.5.3)

nemo-toolkit PYPI version =2.0.0rc0, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =1.0.3, =1.0.7 Source cves: CVE-2025-33245 Source advisory: OSV:GHSA-9379-MWVR-7WXX...

Deserialization of Untrusted Data

Overview nemo-toolkit is a NeMo - a toolkit for Conversational AI Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the model loading process with weightsonly=False. An attacker can execute arbitrary code, escalate privileges, disclose sensitive information...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +14 more potentially affected by CVE-2025-33253 via nemo-toolkit (>=0.10.1, <=2.5.3)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =0.0.4 - wavlmmsdd 1.0.0 and more Source cves: CVE-2025-33253 Source advisory: MEND:CVE-2025-33253...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +14 more potentially affected by CVE-2025-33252 via nemo-toolkit (>=0.10.1, <=2.5.3)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =0.0.4 - wavlmmsdd 1.0.0 and more Source cves: CVE-2025-33252 Source advisory: MEND:CVE-2025-33252...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +14 more potentially affected by CVE-2025-33251 via nemo-toolkit (>=0.10.1, <=2.5.3)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =0.0.4 - wavlmmsdd 1.0.0 and more Source cves: CVE-2025-33251 Source advisory: MEND:CVE-2025-33251...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +14 more potentially affected by CVE-2025-33250 via nemo-toolkit (>=0.10.1, <=2.5.3)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =0.0.4 - wavlmmsdd 1.0.0 and more Source cves: CVE-2025-33250 Source advisory: MEND:CVE-2025-33250...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +14 more potentially affected by CVE-2025-33249 via nemo-toolkit (>=0.10.1, <=2.5.3)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =0.0.4 - wavlmmsdd 1.0.0 and more Source cves: CVE-2025-33249 Source advisory: MEND:CVE-2025-33249...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +14 more potentially affected by CVE-2025-33246 via nemo-toolkit (>=0.10.1, <=2.5.3)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =0.0.4 - wavlmmsdd 1.0.0 and more Source cves: CVE-2025-33246 Source advisory: MEND:CVE-2025-33246...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +14 more potentially affected by CVE-2025-33245 via nemo-toolkit (>=0.10.1, <=2.5.3)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =0.0.4 - wavlmmsdd 1.0.0 and more Source cves: CVE-2025-33245 Source advisory: MEND:CVE-2025-33245...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +14 more potentially affected by CVE-2025-33243 via nemo-toolkit (>=0.10.1, <=2.5.3)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =0.0.4 - wavlmmsdd 1.0.0 and more Source cves: CVE-2025-33243 Source advisory: MEND:CVE-2025-33243...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +14 more potentially affected by CVE-2025-33241 via nemo-toolkit (>=0.10.1, <=2.5.3)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =0.0.4 - wavlmmsdd 1.0.0 and more Source cves: CVE-2025-33241 Source advisory: MEND:CVE-2025-33241...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +14 more potentially affected by CVE-2025-33236 via nemo-toolkit (>=0.10.1, <=2.5.3)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =0.0.4 - wavlmmsdd 1.0.0 and more Source cves: CVE-2025-33236 Source advisory: MEND:CVE-2025-33236...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +13 more potentially affected by CVE-2025-33226 via nemo-toolkit (>=0.10.1, <=2.4.0)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =1.0.3, =1.0.7 Source cves: CVE-2025-33226 Source advisory: MEND:CVE-2025-33226...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +13 more potentially affected by CVE-2025-33212 via nemo-toolkit (>=0.10.1, <=2.4.0)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =1.0.3, =1.0.7 Source cves: CVE-2025-33212 Source advisory: MEND:CVE-2025-33212...

CVE-2025-33203

NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +13 more potentially affected by CVE-2025-33205 via nemo-toolkit (>=0.10.1, <=2.4.0)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =1.0.3, =1.0.7 Source cves: CVE-2025-33205 Source advisory: MEND:CVE-2025-33205...

fast-whisper-diarizer (>=0.1.2, <=0.1.32), faster-whisper-hotkey (>=0.5.0, <=0.5.5) +13 more potentially affected by CVE-2025-33204 via nemo-toolkit (>=0.10.1, <=2.4.0)

nemo-toolkit PYPI version =0.10.1, =0.1.2, =0.5.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev201117, =0.0.3, =1.0.3, =1.0.7 Source cves: CVE-2025-33204 Source advisory: MEND:CVE-2025-33204...