{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.0"}],"component":"paddlepaddle","cve_ids":["CVE-2024-0818"],"ecosystem":"PyPI","epss":0.01058,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2rp8-hff9-c5wr","id":"tcs_01M5KET88Y6GB9G9BCCW5W2ZMV","modified_at":"2026-09-10T03:50:00.238928928Z","published_at":"2024-03-07T15:30:38Z","references":["https://osv.dev/vulnerability/GHSA-2rp8-hff9-c5wr","https://nvd.nist.gov/vuln/detail/CVE-2024-0818","https://github.com/PaddlePaddle/Paddle/commit/5c50d1a8b97b310cbc36560ec36d8377d6f29d7c","https://github.com/PaddlePaddle/Paddle","https://huntr.com/bounties/85b06a1b-ac0b-4096-a06d-330891570cd9"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-2rp8-hff9-c5wr","url":"https://osv.dev/vulnerability/GHSA-2rp8-hff9-c5wr"}],"summary":"PaddlePaddle Path Traversal vulnerability"}