| Package | Affected versions | Patched versions |
|---|---|---|
| nemo speech | < 3.0.0 | 3.0.0 |
NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted model_config.yaml can inject unsafe parameters. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free