| Package | Affected versions | Patched versions |
|---|---|---|
| nemo | < 2.5.1 | 2.5.1 |
NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free