CVE-2024-0815
2 advisories.
PyPI/paddlepaddle CVE-2024-0815: high 8.8, EPSS 1.13%
PaddlePaddle command injection in paddle.utils.download._wget_download
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.6.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qqv2-35q8-p2g2
- https://nvd.nist.gov/vuln/detail/CVE-2024-0815
- https://github.com/PaddlePaddle/Paddle/commit/4c0888d7b8f10405e2e79adc41c224264f93e816
- https://github.com/PaddlePaddle/Paddle
- https://huntr.com/bounties/83bf8191-b259-4b24-8ec9-0115d7c05350
CVE-2024-0815 · published · modified · JSON
PyPI/paddlepaddle CVE-2024-0815: high 8.8, EPSS 1.13%
PaddlePaddle command injection in paddle.utils.download._wget_download
Action: Upgrade paddlepaddle to 3.0.0-beta0 or later.
pip install paddlepaddle==3.0.0-beta0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0-beta0 | - |
Fixed versions
| 3.0.0-beta0 |
Sources
- osv: PYSEC-2026-1756
- https://nvd.nist.gov/vuln/detail/CVE-2024-0815
- https://github.com/PaddlePaddle/Paddle/commit/4c0888d7b8f10405e2e79adc41c224264f93e816
- https://github.com/PaddlePaddle/Paddle
- https://huntr.com/bounties/83bf8191-b259-4b24-8ec9-0115d7c05350
- https://pypi.org/project/paddlepaddle
- https://github.com/advisories/GHSA-qqv2-35q8-p2g2
CVE-2024-0815 · published · modified · JSON