| Package | Affected versions | Patched versions |
|---|---|---|
| nemo speech | < 3.0.0 | 3.0.0 |
NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load() without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free