PT-2026-53526 · Pypi · Paddlepaddle

Publicado 2026-06-29 · Atualizado 2026-06-29

OSV

CVSS v3.1

9.3

Crítica

Vetor base

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands.

Correção

Identificadores relacionados

PYSEC-2026-444

Produtos afetados

Paddlepaddle

Referências · 6

• https://github.com/PaddlePaddle/Paddle · Nota
• https://osv.dev/vulnerability/PYSEC-2026-444 · Aviso do Fabricante
• https://github.com/advisories/GHSA-chj7-w3f6-cvfj · Nota
• https://pypi.org/project/paddlepaddle · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-0521 · Nota de Segurança
• https://huntr.com/bounties/a569c64b-1e2b-4bed-a19f-47fd5a3da453 · Nota