| Package | Affected versions | Patched versions |
|---|---|---|
| paddlepaddle | < 2.4.0 | 2.4.0 |
| paddlepaddle | = 2.4.0 |
Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. A patch is available on the develop branch of the repository and anticipated to be part of a 2.4 release.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free