VulnerableCode Package Details - pkg:pypi/nemo-toolkit@2.3.2

Search for packages

Vulnerability	Summary	Fixed by
VCID-5efe-4xv8-dbab Aliases: CVE-2026-24157 GHSA-m4jw-wgmf-889x	NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.	2.6.2 Affected by 0 other vulnerabilities.
VCID-5hgv-xh7q-zyek Aliases: CVE-2025-33245 GHSA-9379-mwvr-7wxx	NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.	2.6.1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-fkpp-ezrs-wuee Aliases: CVE-2026-24159 GHSA-v7v2-m736-cf3c	NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.	2.6.2 Affected by 0 other vulnerabilities.
VCID-gq7q-tr17-kyhz Aliases: CVE-2025-33253 GHSA-hvjw-vp7g-39h5	NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.	2.6.1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-5efe-4xv8-dbab
Aliases:
CVE-2026-24157
GHSA-m4jw-wgmf-889x

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

2.6.2
Affected by 0 other vulnerabilities.

VCID-5hgv-xh7q-zyek
Aliases:
CVE-2025-33245
GHSA-9379-mwvr-7wxx

NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

2.6.1
Affected by 2 other vulnerabilities.

VCID-fkpp-ezrs-wuee
Aliases:
CVE-2026-24159
GHSA-v7v2-m736-cf3c

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering.

2.6.2
Affected by 0 other vulnerabilities.

VCID-gq7q-tr17-kyhz
Aliases:
CVE-2025-33253
GHSA-hvjw-vp7g-39h5

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering.

2.6.1
Affected by 2 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-12T21:36:11.640272+00:00	GitLab Importer	Affected by	VCID-fkpp-ezrs-wuee	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/nemo-toolkit/CVE-2026-24159.yml	38.6.0
2026-06-12T21:35:53.087074+00:00	GitLab Importer	Affected by	VCID-5efe-4xv8-dbab	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/nemo-toolkit/CVE-2026-24157.yml	38.6.0
2026-06-12T21:00:04.625326+00:00	GitLab Importer	Affected by	VCID-5hgv-xh7q-zyek	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/nemo-toolkit/CVE-2025-33245.yml	38.6.0
2026-06-12T21:00:00.456153+00:00	GitLab Importer	Affected by	VCID-gq7q-tr17-kyhz	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/nemo-toolkit/CVE-2025-33253.yml	38.6.0