{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.0"}],"component":"paddlepaddle","cve_ids":["CVE-2024-0818"],"ecosystem":"PyPI","epss":0.01058,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2rp8-hff9-c5wr","id":"tcs_01M5KHBCEZP4GPKGWWZ5AA03WD","modified_at":"2026-07-01T20:22:59.727116Z","published_at":"2026-06-29T11:50:39.144118Z","references":["https://osv.dev/vulnerability/PYSEC-2026-442","https://nvd.nist.gov/vuln/detail/CVE-2024-0818","https://github.com/PaddlePaddle/Paddle/commit/5c50d1a8b97b310cbc36560ec36d8377d6f29d7c","https://github.com/PaddlePaddle/Paddle","https://huntr.com/bounties/85b06a1b-ac0b-4096-a06d-330891570cd9","https://pypi.org/project/paddlepaddle","https://github.com/advisories/GHSA-2rp8-hff9-c5wr"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-442","url":"https://osv.dev/vulnerability/PYSEC-2026-442"}],"summary":"PaddlePaddle Path Traversal vulnerability"}