p PatchFirst

CVE-2024-1603

CVE-2024-1603 · confirmed

This page contains facts from public vulnerability sources. Check the original advisory before updating.

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.

CVSS 8.2 · High · EPSS 0.6%

Published
Updated

Stack: python

Affected products and versions

  • paddlepaddle/paddle

    Versions
    • ≥ unspecified, ≤ latest: Affected (custom)

    No fix published

  • paddlepaddle PyPI

    Versions
    • 1.8.5
    Affected ranges
    • ECOSYSTEM: ≤ 2.6.0

    No fix published

Original sources

Check your server →