630 matches found
CVE-2026-108961
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961 PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
EUVD-2026-98276
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961 PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
CVE-2026-108961
A code injection vulnerability exists in PaddlePaddle PaddleX versions up to 3.7.2 . The flaw is located in the NormalizeImage.__init__ function within the paddlex/inference/models/text_detection/processors.py file of the Preprocessor component. Attackers can exploit this by manipulating the scal...
PT-2026-111274
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage. init of the file paddlex/inference/models/text detection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is...
CVE-2026-108961: Improper Control of Generation of Code
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.init of the file paddlex/inference/models/textdetection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possib...
PaddlePaddle PaddleX: Input validation error vulnerability
PaddlePaddle PaddleX 3.7.2 and earlier versions have a security vulnerability. This vulnerability stems from the operation of the parameter scale in the NormalizeImage.init function within the Processor component. It may lead to code injection, allowing attackers to launch attacks remotely...
PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file
paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2024-1603 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2024-1603...
PYSEC-2026-1755 PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file
paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...
PaddlePaddle command injection vulnerability
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...
PYSEC-2026-1754 PaddlePaddle command injection vulnerability
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2024-0817 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2024-0817...
paddle-ner (0.1.0), paddle-quantum (>=1.1.1, <=2.2.1) +3 more potentially affected by CVE-2024-0815 via paddlepaddle (1.8.5)
paddlepaddle PYPI version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner 0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer 0.1.0 - pyunit-ner 2021.8.2 Source cves: CVE-2024-0815...
aait (>=1.0.4, <=1.0.5), arcoocr (1.0.1) +32 more potentially affected by CVE-2024-0817 via paddlepaddle (2.6.2)
paddlepaddle PYPI version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - aait =1.0.4, =0.2.2.15, =0.1.21, =0.1.0, =0.0.1, =0.0.1a0, =5.1.6, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2024-0817 Source...
aait (>=1.0.4, <=1.0.5), arcoocr (1.0.1) +32 more potentially affected by CVE-2024-0815 via paddlepaddle (2.6.2)
paddlepaddle PYPI version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - aait =1.0.4, =0.2.2.15, =0.1.21, =0.1.0, =0.0.1, =0.0.1a0, =5.1.6, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2024-0815 Source...