high8.8
CVE-2024-0815
PaddlePaddle command injection in paddle.utils.download._wget_download
Impact
Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | paddlepaddle | <= 2.6.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paddlepaddle | Paddlepaddle | Version 2.6.0 |