HIGH8.0PyPI
GHSA-9379-mwvr-7wxx· CVE-2025-33245, PYSEC-2026-2672NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
Modified: 7/13/2026
package
PyPI/nemo-toolkit
pkg:pypi/nemo-toolkit
MEDIUM4.4PyPI
GHSA-9hg3-hmmf-c3gr· CVE-2022-22821, GHSA-rpx7-33j2-xx9xPath Traversal in nemo-toolkit
Modified: 7/8/2026
HIGH7.8PyPI
GHSA-hvjw-vp7g-39h5· CVE-2025-33253, PYSEC-2026-2673NVIDIA NeMo Framework Deserializes Untrusted Data
Modified: 7/13/2026
HIGH7.8PyPI
GHSA-m4jw-wgmf-889x· CVE-2026-24157, PYSEC-2026-2674NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
Modified: 7/13/2026
LOW2.0PyPI
GHSA-rpx7-33j2-xx9x· CVE-2022-22821, GHSA-9hg3-hmmf-c3grArbitrary file deletion in NeMo ASR webapp
Modified: 7/8/2026
HIGH7.8PyPI
GHSA-v7v2-m736-cf3c· CVE-2026-24159, PYSEC-2026-2675NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
Modified: 7/13/2026
HIGH8.0PyPI
PYSEC-2026-2672· CVE-2025-33245, GHSA-9379-mwvr-7wxxNVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
Modified: 7/13/2026
HIGH7.8PyPI
PYSEC-2026-2673· CVE-2025-33253, GHSA-hvjw-vp7g-39h5NVIDIA NeMo Framework Deserializes Untrusted Data
Modified: 7/13/2026
HIGH7.8PyPI
PYSEC-2026-2674· CVE-2026-24157, GHSA-m4jw-wgmf-889xNVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
Modified: 7/13/2026
HIGH7.8PyPI
PYSEC-2026-2675· CVE-2026-24159, GHSA-v7v2-m736-cf3cNVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
Modified: 7/13/2026
MEDIUM4.4PyPI
PYSEC-2026-685· CVE-2022-22821, GHSA-9hg3-hmmf-c3grPath Traversal in nemo-toolkit
Modified: 7/8/2026