Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/36676?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36676?format=api", "vulnerability_id": "VCID-45e3-a2hf-4bh9", "summary": "PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system.", "aliases": [ { "alias": "CVE-2023-52310" }, { "alias": "GHSA-j5h9-9r39-43q5" }, { "alias": "PYSEC-2024-142" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38543?format=api", "purl": "pkg:pypi/paddlepaddle@2.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17nd-k3cn-4bb4" }, { "vulnerability": "VCID-fsej-h74n-6ffs" }, { "vulnerability": "VCID-fzzq-2t1q-p7fa" }, { "vulnerability": "VCID-mpck-qgnf-vfg5" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-wqhd-4yv8-37ea" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.6.0" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/30181?format=api", "purl": "pkg:pypi/paddlepaddle@1.8.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-5s1z-ubhw-y7af" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-kcxs-f62a-8fbb" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-nvts-nkrt-7ybs" }, { "vulnerability": "VCID-p4dk-geq7-j3b7" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-swfm-bfvg-quft" }, { "vulnerability": "VCID-vwp3-2fev-3qaz" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@1.8.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/30194?format=api", "purl": "pkg:pypi/paddlepaddle@2.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-5s1z-ubhw-y7af" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-kcxs-f62a-8fbb" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-nvts-nkrt-7ybs" }, { "vulnerability": "VCID-p4dk-geq7-j3b7" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-swfm-bfvg-quft" }, { "vulnerability": "VCID-vwp3-2fev-3qaz" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/30195?format=api", "purl": "pkg:pypi/paddlepaddle@2.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-5s1z-ubhw-y7af" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-kcxs-f62a-8fbb" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-nvts-nkrt-7ybs" }, { "vulnerability": "VCID-p4dk-geq7-j3b7" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-swfm-bfvg-quft" }, { "vulnerability": "VCID-vwp3-2fev-3qaz" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/30196?format=api", "purl": "pkg:pypi/paddlepaddle@2.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-5s1z-ubhw-y7af" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-kcxs-f62a-8fbb" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-nvts-nkrt-7ybs" }, { "vulnerability": "VCID-p4dk-geq7-j3b7" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-swfm-bfvg-quft" }, { "vulnerability": "VCID-vwp3-2fev-3qaz" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.3.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/30197?format=api", "purl": "pkg:pypi/paddlepaddle@2.4.0rc0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-5s1z-ubhw-y7af" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-kcxs-f62a-8fbb" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-nvts-nkrt-7ybs" }, { "vulnerability": "VCID-p4dk-geq7-j3b7" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-swfm-bfvg-quft" }, { "vulnerability": "VCID-vwp3-2fev-3qaz" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.4.0rc0" }, { "url": "http://public2.vulnerablecode.io/api/packages/30198?format=api", "purl": "pkg:pypi/paddlepaddle@2.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-5s1z-ubhw-y7af" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-kcxs-f62a-8fbb" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-nvts-nkrt-7ybs" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-swfm-bfvg-quft" }, { "vulnerability": "VCID-vwp3-2fev-3qaz" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/35074?format=api", "purl": "pkg:pypi/paddlepaddle@2.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-5s1z-ubhw-y7af" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-kcxs-f62a-8fbb" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-nvts-nkrt-7ybs" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-swfm-bfvg-quft" }, { "vulnerability": "VCID-vwp3-2fev-3qaz" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/35075?format=api", "purl": "pkg:pypi/paddlepaddle@2.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-5s1z-ubhw-y7af" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-kcxs-f62a-8fbb" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-nvts-nkrt-7ybs" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-swfm-bfvg-quft" }, { "vulnerability": "VCID-vwp3-2fev-3qaz" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.4.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/35076?format=api", "purl": "pkg:pypi/paddlepaddle@2.5.0rc0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-5s1z-ubhw-y7af" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-kcxs-f62a-8fbb" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-nvts-nkrt-7ybs" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-swfm-bfvg-quft" }, { "vulnerability": "VCID-vwp3-2fev-3qaz" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.5.0rc0" }, { "url": "http://public2.vulnerablecode.io/api/packages/35077?format=api", "purl": "pkg:pypi/paddlepaddle@2.5.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-5s1z-ubhw-y7af" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-kcxs-f62a-8fbb" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-nvts-nkrt-7ybs" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-swfm-bfvg-quft" }, { "vulnerability": "VCID-vwp3-2fev-3qaz" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.5.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/35078?format=api", "purl": "pkg:pypi/paddlepaddle@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/38541?format=api", "purl": "pkg:pypi/paddlepaddle@2.5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.5.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/38542?format=api", "purl": "pkg:pypi/paddlepaddle@2.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-17s7-wrdn-ebes" }, { "vulnerability": "VCID-35qf-2v8r-t3cf" }, { "vulnerability": "VCID-45e3-a2hf-4bh9" }, { "vulnerability": "VCID-49pw-ktz7-jfh4" }, { "vulnerability": "VCID-7dca-ch9k-jkb6" }, { "vulnerability": "VCID-9cbs-47dq-rfca" }, { "vulnerability": "VCID-akmg-8bh1-xufv" }, { "vulnerability": "VCID-cuna-r55b-rqf3" }, { "vulnerability": "VCID-fbr1-2g6w-tqaa" }, { "vulnerability": "VCID-fd4j-1rre-5ua9" }, { "vulnerability": "VCID-h7rz-ms5h-huen" }, { "vulnerability": "VCID-ndbe-sr54-f3ha" }, { "vulnerability": "VCID-nehj-8bwx-qyce" }, { "vulnerability": "VCID-pt8v-dqvj-yue7" }, { "vulnerability": "VCID-pyt1-w4bk-x7cb" }, { "vulnerability": "VCID-s51x-rhes-73h1" }, { "vulnerability": "VCID-sshq-1n66-uugm" }, { "vulnerability": "VCID-z3ar-bcd5-gya8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/paddlepaddle@2.5.2" } ], "references": [ { "reference_url": "https://github.com/PaddlePaddle/Paddle", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/PaddlePaddle/Paddle" }, { "reference_url": "https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-019.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-019.md" }, { "reference_url": "https://github.com/PaddlePaddle/Paddle/commit/49bec176053595975c1941cff9749c55f7203ea9", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/PaddlePaddle/Paddle/commit/49bec176053595975c1941cff9749c55f7203ea9" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/paddlepaddle/PYSEC-2024-142.yaml", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/paddlepaddle/PYSEC-2024-142.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52310", "reference_id": "CVE-2023-52310", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52310" }, { "reference_url": "https://github.com/advisories/GHSA-j5h9-9r39-43q5", "reference_id": "GHSA-j5h9-9r39-43q5", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-j5h9-9r39-43q5" } ], "weaknesses": [ { "cwe_id": 78, "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "description": "The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": "9.8 - 9.8", "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-45e3-a2hf-4bh9" }