| Package | Affected versions | Patched versions |
|---|---|---|
| paddlepaddle | < 2.6.0 | 2.6.0 |
| paddlepaddle | < 2.6.0 | 2.6.0 |
PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operating system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free