PYSEC-2026-685
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/nemo-toolkit/PYSEC-2026-685.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-685
- Aliases
- Published
- 2026-07-02T14:13:14.599712Z
- Modified
- 2026-07-08T06:49:39.314731245Z
- Severity
-
- 4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- Path Traversal in nemo-toolkit
- Details
-
NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.
- References
Affected packages
PyPI / nemo-toolkit
Package
- Name
- nemo-toolkit
- View open source insights on deps.dev
- Purl
- pkg:pypi/nemo-toolkit
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.6.0
Affected versions
0.*
0.8
0.8.1
0.8.2
0.9.0
0.10.0b0
0.10.0b1
0.10.0b2
0.10.0b3
0.10.0b4
0.10.0b5
0.10.0b6
0.10.0b7
0.10.0b8
0.10.0b9
0.10.0b10
0.10.0
0.10.1
0.11.0b1
0.11.0b2
0.11.0b3
0.11.0b4
0.11.0b5
0.11.0b6
0.11.0b8
0.11.0b10
0.11.0b11
0.11.0b12
0.11.0b14
0.11.0
1.*
1.0.0a4
1.0.0b0
1.0.0b1
1.0.0b2
1.0.0b3
1.0.0rc1
1.0.0
1.0.1
1.0.2
1.1.0
1.2.0
1.3.0
1.4.0
1.5.0
1.5.1