GHSA-HWPQ-HMQ9-WJ77 vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-FGCW-684Q-JJ6R vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2026-5241 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2026-44512 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2026-15044

A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardrails, if a specific security setting is not enabled, these services can expose their communication channels without requiring users to prove their identity. This allows any other program within the...

PT-2026-56458

Name of the Vulnerable Software and Affected Versions TrustyAI Service Operator affected versions not specified Description A flaw in the TrustyAI Service Operator occurs when deploying services such as gorch or NemoGuardrails. If a specific security setting is not enabled, these services expose...

PYSEC-2026-685 Path Traversal in nemo-toolkit

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: drone, reports-server, skaffold-fips, argocd-image-updater-fips, cilium-cli, commercial-grafana, frankenphp-8.4, tekton-pipelines-fips, mattermost, argo-cd-fips, istio, prometheus, zarf-fips, flux-source-controller, traefik, opentofu-fips, knative-serving,...

GHSA-WQP7-X3PW-XC5R vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, nemo...

CVE-2026-48818 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, nemo...

GHSA-X746-7M8F-X49C vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, nemo...

CVE-2026-48817 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, nemo...

CVE-2026-24228

NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and information disclosure...

CVE-2026-24155

NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

EUVD-2026-37130

NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and information disclosure...

CVE-2026-24228

NVIDIA NeMo Framework for Linux contains a vulnerability where deserialization of untrusted data may lead to code execution, privilege escalation, data tampering, and information disclosure. The connected NVIDIA security bulletin confirms affected product: NVIDIA NeMo Framework for Linux, with af...

CVE-2026-24155

NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

EUVD-2026-37129

NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-24155

CVE-2026-24155 affects NVIDIA NeMo Framework for all platforms, described as a code injection vulnerability (CWE-94) that can lead to code execution, privilege escalation, information disclosure, and data tampering. The NVIDIA security bulletin states that CVE-2026-24155 is addressed by updating ...

PT-2026-49726

Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework for Linux affected versions not specified Description An issue exists where an attacker may cause deserialization of untrusted data. Deserialization is the process of converting a data stream back into an object. A...