{"action":"Upgrade nemo-toolkit to 1.6.0 or later.","affected":[{"fixed":"1.6.0","introduced":"0"}],"component":"nemo-toolkit","cve_ids":["CVE-2022-22821"],"ecosystem":"PyPI","epss":0.003,"exploited":false,"fixed_versions":["1.6.0"],"ghsa_id":"GHSA-9hg3-hmmf-c3gr","id":"tcs_01M5KHCWTFBY7SBWAYEZ0ENN63","modified_at":"2026-07-08T06:49:39.314731245Z","published_at":"2026-07-02T14:13:14.599712Z","references":["https://osv.dev/vulnerability/PYSEC-2026-685","https://github.com/NVIDIA/NeMo/security/advisories/GHSA-rpx7-33j2-xx9x","https://nvd.nist.gov/vuln/detail/CVE-2022-22821","https://github.com/NVIDIA/NeMo","https://pypi.org/project/nemo-toolkit","https://github.com/advisories/GHSA-9hg3-hmmf-c3gr"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-685","url":"https://osv.dev/vulnerability/PYSEC-2026-685"}],"summary":"Path Traversal in nemo-toolkit"}