CVE-2026-41168 vulnerabilities

Vulnerabilities for packages: open-webui, nemo, litellm...

CVE-2026-41312 vulnerabilities

Vulnerabilities for packages: open-webui, nemo, litellm...

CVE-2026-41313 vulnerabilities

Vulnerabilities for packages: open-webui, nemo, litellm...

CVE-2026-41205 vulnerabilities

Vulnerabilities for packages: pgadmin4-fips, nemo, superset, mlflow, dagster-fips, prefect-fips, open-webui, dagster, airflow, jupyter-base-notebook, airflow-core...

CVE-2026-24222

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandb...

CVE-2026-24222

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandb...

CVE-2026-24222

NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending prompt-injected content that causes the agent to read and exfiltrate host environment variables not properly restricted during sandb...

GHSA-W8V5-VHQR-4H9V vulnerabilities

Vulnerabilities for packages: nemo, vllm-openai-cuda-12.9, vllm-openai-cuda-13.0, vllm-cuda-13.2, tritonserver-backend-vllm-cuda-13.0...

CVE-2025-69872 vulnerabilities

Vulnerabilities for packages: nemo, vllm-openai-cuda-12.9, vllm-openai-cuda-13.0, vllm-cuda-13.2, tritonserver-backend-vllm-cuda-13.0...

CVE-2026-40491 vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-76HW-P97H-883F vulnerabilities

Vulnerabilities for packages: nemo...

MAL-2026-2785 Malicious code in nemo-jaws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b0aca2f522f9d9ab39b1b2ddf4f16b0e2d5c40b796392848c3a3ac77e73fa On npm install, the package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir, and...

Malicious code in nemo-jaws (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b0aca2f522f9d9ab39b1b2ddf4f16b0e2d5c40b796392848c3a3ac77e73fa On npm install, the package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir, and...

MAL-2026-2784 Malicious code in nemo-datadrive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e279624646b095ac821ca5abba18d037f7c0171da7a5419ce7881330ba92be4 The package nemo-datadrive was found to contain malicious code...

Malicious code in nemo-datadrive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e279624646b095ac821ca5abba18d037f7c0171da7a5419ce7881330ba92be4 The package nemo-datadrive was found to contain malicious code...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24175 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.7.0 Source cves: CVE-2026-24175 Source advisory:...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24173 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.7.0 Source cves: CVE-2026-24173 Source advisory:...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-24146 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.7.0 Source cves: CVE-2026-24146 Source advisory:...

Malicious code in @not-nemo/crypto-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3d07c3fa41dbb4ad057bb2b346b271dcbef43545376e8a8ad252d64abd7e25 The package @not-nemo/crypto-tracker was found to contain malicious code. Source: ghsa-malware...

MAL-2026-2491 Malicious code in @not-nemo/crypto-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f3d07c3fa41dbb4ad057bb2b346b271dcbef43545376e8a8ad252d64abd7e25 The package @not-nemo/crypto-tracker was found to contain malicious code. Source: ghsa-malware...