PyPI/paddlepaddle CVE-2024-0815: high 8.8, EPSS 1.13%
PaddlePaddle command injection in paddle.utils.download._wget_download
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.6.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qqv2-35q8-p2g2
- https://nvd.nist.gov/vuln/detail/CVE-2024-0815
- https://github.com/PaddlePaddle/Paddle/commit/4c0888d7b8f10405e2e79adc41c224264f93e816
- https://github.com/PaddlePaddle/Paddle
- https://huntr.com/bounties/83bf8191-b259-4b24-8ec9-0115d7c05350
CVE-2024-0815 · published · modified · JSON