~ / search / GHSA-hvjw-vp7g-39h5

GHSA-hvjw-vp7g-39h5

NVIDIA NeMo Framework Deserializes Untrusted Data

Source: GitHub Advisory Database (reviewed) High CVE-2025-33253

Packages

EcosystemPackageAffectedFixed in
PyPI nemo-toolkit < 2.6.1 2.6.1

Details

As written in the advisory (Markdown source, shown as plain text).

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

References

External links from the advisory. They lead to third-party sites.