PyPI/paddlepaddle CVE-2024-0817: high 7.8, EPSS 1.17%

PaddlePaddle command injection vulnerability

Action: Upgrade paddlepaddle to 3.0.0-beta0 or later.

pip install paddlepaddle==3.0.0-beta0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1754
• https://nvd.nist.gov/vuln/detail/CVE-2024-0817
• https://github.com/PaddlePaddle/Paddle/commit/bdf6234fdc22e6ee7948950d271cbbe1d27edc93
• https://github.com/PaddlePaddle/Paddle
• https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3
• https://pypi.org/project/paddlepaddle
• https://github.com/advisories/GHSA-fh54-3vhg-mpc2

CVE-2024-0817 · published 2026-07-07T11:45:34.489529Z · modified 2026-07-07T17:47:08.248746116Z · JSON