PyPI/nemo-toolkit CVE-2022-22821: low 2, EPSS 0.31%

Arbitrary file deletion in NeMo ASR webapp

Action: Upgrade nemo-toolkit to 1.6.0 or later.

pip install nemo-toolkit==1.6.0

Affected

Fixed versions

Sources

• osv: GHSA-rpx7-33j2-xx9x
• https://github.com/NVIDIA/NeMo/security/advisories/GHSA-rpx7-33j2-xx9x
• https://github.com/NVIDIA/NeMo/commit/f7e4ed7e4f7f2fa43765a38c2fafa1b6d1ebd7c0
• https://github.com/NVIDIA/NeMo

CVE-2022-22821 · published 2022-02-15T01:57:18Z · modified 2026-07-08T06:49:39.314731245Z · JSON