Open-source package vulnerability · PyPI
CVE-2024-0818: PaddlePaddle Path Traversal vulnerability
criticalCVSS 3.1 9.1GHSA-2rp8-hff9-c5wr
Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6
Published Mar 7, 2024 · Updated Jan 23, 2025
Affected packages
paddlepaddle
- Ecosystem
- PyPI
- Affected
- <= 2.6.0
- Fixed in
- No patched version yet
- Check
pip show paddlepaddle
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology