confirmed
paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.
Published Updated
PatchFirst · Latest vulnerabilities
paddlepaddle 2.6.0: known vulnerabilities
Known vulnerabilities affecting paddlepaddle 2.6.0: 6. Compare the fixes below with your installed release.
Vulnerabilities: 6
CVE-2024-0818
Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6
Published UpdatedCVE-2024-0917
remote code execution in paddlepaddle/paddle 2.6.0
Published UpdatedCVE-2024-0815
Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0
- Update to 3.0.0-beta0
Published UpdatedCVE-2024-0817
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0
- Update to 3.0.0-beta0
Published UpdatedNull pointer dereference in paddle.crop
Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
- Update to 2.6.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.