Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-0129
6.3
MEDIUMCVSS v3
Severity scale
010
Description
NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering.
NVIDIA-NeMo/NeMo
GitHubA scalable generative AI framework built for researchers and developers working on Large Language Models, Multimodal, and Speech AI (Automatic Speech Recognition and Text-to-Speech)
GitHubA scalable generative AI framework built for researchers and developers working on Large Language Models, Multimodal, and Speech AI (Automatic Speech Recognition and Text-to-Speech)<= r2.0.0rc0NVD