Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-46742

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gcjf-29m9-888q

PaddlePaddle vulnerable to Code Injection Code injection in `paddle.audio.functional.get_window` in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. A patch https://github.com/PaddlePaddle/Paddle/commit/26c419ca386aeae3c461faf2b828d00b48e908eb is available on the `develop` branch of the repository and anticipated to be part of a 2.4 release.

gitlab/pypi/paddlepaddle/CVE-2022-46742

PaddlePaddle vulnerable to Code Injection Code injection in `paddle.audio.functional.get_window` in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. A patch https://github.com/PaddlePaddle/Paddle/commit/26c419ca386aeae3c461faf2b828d00b48e908eb is available on the `develop` branch of the repository and anticipated to be part of a 2.4 release.

pypa/paddlepaddle/PYSEC-2022-43063

Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.

pysec/PYSEC-2022-43063

Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.