CRITICAL9.8PyPI
GHSA-6qv6-q77g-7qm6· CVE-2022-34668, PYSEC-2022-257NVFLARE unsafe deserialization due to Pickle
Modified: 7/8/2026
package
PyPI/nvflare
pkg:pypi/nvflare
CRITICAL9.8PyPI
GHSA-hrf3-622q-8366· CVE-2022-31605, PYSEC-2022-232Unsafe yaml deserialization in NVFlare
Modified: 7/8/2026
CRITICAL9.8PyPI
GHSA-jqp3-qrgh-4846· CVE-2026-24178, PYSEC-2026-100NVIDIA NVFlare Dashboard: Authorization bypass through user-controlled key via user management and authentication system
Modified: 6/9/2026
HIGH7.5PyPI
GHSA-jx8f-cpx7-fv47· CVE-2022-21822, PYSEC-2026-695Allocation of Resources Without Limits or Throttling in nvflare
Modified: 7/8/2026
CRITICAL9.8PyPI
GHSA-rcxc-3w2m-mp8h· CVE-2022-31604, PYSEC-2022-231Unsafe deserialisation in the PKI implementation scheme of NVFlare
Modified: 7/8/2026
—PyPI
PYSEC-2022-231· CVE-2022-31604, GHSA-rcxc-3w2m-mp8hModified: 11/8/2023
—PyPI
PYSEC-2022-232· CVE-2022-31605, GHSA-hrf3-622q-8366Modified: 11/8/2023
—PyPI
PYSEC-2022-257· CVE-2022-34668, GHSA-6qv6-q77g-7qm6Modified: 10/9/2025
CRITICAL9.8PyPI
PYSEC-2026-100· CVE-2026-24178, GHSA-jqp3-qrgh-4846Modified: 6/10/2026
HIGH7.5PyPI
PYSEC-2026-695· CVE-2022-21822, GHSA-jx8f-cpx7-fv47Allocation of Resources Without Limits or Throttling in nvflare
Modified: 7/6/2026