PYSEC-2026-444
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/paddlepaddle/PYSEC-2026-444.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-444
- Aliases
-
- CVE-2024-0521
- GHSA-chj7-w3f6-cvfj
- Published
- 2026-06-29T11:50:41.523710Z
- Modified
- 2026-06-29T12:15:34.019300482Z
- Severity
-
- 9.3 (Critical) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- Code Injection in paddlepaddle
- Details
-
The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands.
- References
Affected packages
PyPI / paddlepaddle
Package
- Name
- paddlepaddle
- View open source insights on deps.dev
- Purl
- pkg:pypi/paddlepaddle