Advisoriesby Ibis
PaddlePaddle security advisories
32 advisories · none critical or high in 12 months · latest Mar 23, 2024
32 advisories
PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_fileCVE-2024-1603no fix yetPaddlePaddle Path Traversal vulnerabilityCVE-2024-0818no fix yetPaddlePaddle vulnerable to remote code executionCVE-2024-0917no fix yetPaddlePaddle command injection in paddle.utils.download._wget_downloadCVE-2024-0815no fix yetPaddlePaddle command injection vulnerabilityCVE-2024-0817no fix yetCode Injection in paddlepaddleCVE-2024-0521fixed in 2.6.0PaddlePaddle floating point exception in paddle.argmin and paddle.argmaxCVE-2023-52313fixed in 2.6.0PaddlePaddle command injection in convert_shape_compareCVE-2023-52314fixed in 2.6.0PaddlePaddle stack overflow in paddle.searchsortedCVE-2023-52304fixed in 2.6.0PaddlePaddle heap buffer overflow in paddle.repeat_interleaveCVE-2023-52309fixed in 2.6.0PaddlePaddle stack overflow in paddle.linalg.lu_unpackCVE-2023-52307fixed in 2.6.0PaddlePaddle command injection in get_online_pass_intervalCVE-2023-52310fixed in 2.6.0PaddlePaddle nullptr dereference in paddle.cropCVE-2023-52312fixed in 2.6.0PaddlePaddle command injection in _wget_downloadCVE-2023-52311fixed in 2.6.0PaddlePaddle floating point exception in paddle.lerpCVE-2023-52306fixed in 2.6.0PaddlePaddle floating point exception in paddle.topkCVE-2023-52305fixed in 2.6.0PaddlePaddle floating point exception in paddle.aminCVE-2023-52308fixed in 2.6.0PaddlePaddle segfault in paddle.put_along_axisCVE-2023-52303fixed in 2.6.0PaddlePaddle null pointer dereference in paddle.nextafterCVE-2023-52302fixed in 2.6.0PaddlePaddle floating point exception in paddle.linalg.eigCVE-2023-38677fixed in 2.6.0PaddlePaddle floating point exception in paddle.linalg.matrix_rankCVE-2023-38675fixed in 2.6.0PaddlePaddle segfault in paddle.modeCVE-2023-38678fixed in 2.6.0PaddlePaddle segfault in paddle.dotCVE-2023-38676fixed in 2.6.0PaddlePaddle floating point exception in paddle.nanmedianCVE-2023-38674fixed in 2.6.0Use after free in PaddlePaddleCVE-2023-38669fixed in 2.5.0Command injection in PaddlePaddleCVE-2023-38673fixed in 2.5.0Float point exception (FPE) in paddlepaddleCVE-2023-38672fixed in 2.5.0Heap buffer overflow in PaddlePaddleCVE-2023-38671fixed in 2.5.0Null pointer dereference in PaddlePaddleCVE-2023-38670fixed in 2.5.0PaddlePaddle Out-of-bounds Read vulnerabilityCVE-2022-46741fixed in 2.4PaddlePaddle vulnerable to Code InjectionCVE-2022-46742fixed in 2.4.0PaddlePaddle vulnerable to code injection via winstrCVE-2022-45908fixed in 2.4About PaddlePaddle
The deep learning platform from Baidu.
Packages watched: paddlepaddle (PyPI).