Launch Week Day 1: Announcing Security Design Review
CRITICAL 9.3 PyPI

Code Injection in paddlepaddle

GHSA-chj7-w3f6-cvfj · CVE-2024-0521

Published · Modified

Description

The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands.

Ready to move

Start Securing

Free, no credit card | First findings in minutes