PaddlePaddle command injection in paddle.utils.download._wget_download

ALTO 8.8CVE-2024-0815 · GHSA-qqv2-35q8-p2g2 · PYSEC-2026-1756 · Published 07/03/2024 · updated 17/06/2026

En resumen

CVE-2024-0815 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a paddlepaddle, paddlepaddle (paddlepaddle).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 66.4% de las vulnerabilidades.
Solución: actualizar a 3.0.0-beta0 o posterior.

Package	Affected versions	Patched versions
paddlepaddle PyPI	`≤ 2.6.0< 3.0.0-beta0`	`3.0.0-beta0`
paddlepaddle paddlepaddle	`= 2.6.0`	No fix yet

Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0

NVD description

Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

≤ 2.6.0< 3.0.0-beta0

3.0.0-beta0

= 2.6.0

No fix yet

Más vulnerabilidades de paddlepaddle

Ver todo →