| Package | Affected versions | Patched versions |
|---|---|---|
| nemo | < 2.6.1 | 2.6.1 |
NVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility, where a user could cause a command injection by supplying crafted input to a configuration parameter. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, or information disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free