paddlepaddle (PyPI)
Advisories
64
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 3.0.0-beta0 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "paddlepaddle>=3.0.0-beta0"poetry
poetry add "paddlepaddle>=3.0.0-beta0"uv
uv add "paddlepaddle>=3.0.0-beta0"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-jwrc-3v3f-5cq5 PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file |
High EPSS 0.56% |
<= 2.6.0 | No fix yet |
| GHSA-jwrc-3v3f-5cq5 PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file |
High EPSS 0.56% |
<= 2.6.0 | No fix yet |
| GHSA-2rp8-hff9-c5wr PaddlePaddle Path Traversal vulnerability |
Critical EPSS 1.06% |
<= 2.6.0 | No fix yet |
| GHSA-2rp8-hff9-c5wr PaddlePaddle Path Traversal vulnerability |
Critical EPSS 1.06% |
<= 2.6.0 | No fix yet |
| GHSA-mrmm-qmrj-xgp6 PaddlePaddle vulnerable to remote code execution |
Critical EPSS 1.65% |
<= 2.6.0 | No fix yet |
| GHSA-mrmm-qmrj-xgp6 PaddlePaddle vulnerable to remote code execution |
Critical EPSS 1.65% |
<= 2.6.0 | No fix yet |
| GHSA-qqv2-35q8-p2g2 PaddlePaddle command injection in paddle.utils.download._wget_download |
High EPSS 1.13% |
<= 2.6.0 | No fix yet |
| GHSA-qqv2-35q8-p2g2 PaddlePaddle command injection in paddle.utils.download._wget_download |
High EPSS 1.13% |
< 3.0.0-beta0 | 3.0.0-beta0 |
| GHSA-fh54-3vhg-mpc2 PaddlePaddle command injection vulnerability |
High EPSS 1.17% |
< 3.0.0-beta0 | 3.0.0-beta0 |
| GHSA-fh54-3vhg-mpc2 PaddlePaddle command injection vulnerability |
High EPSS 1.17% |
<= 2.6.0 | No fix yet |
| GHSA-chj7-w3f6-cvfj Code Injection in paddlepaddle |
High EPSS 0.46% |
< 2.6.0 | 2.6.0 |
| GHSA-chj7-w3f6-cvfj Code Injection in paddlepaddle |
High EPSS 0.46% |
< 2.6.0 | 2.6.0 |
| GHSA-rf7p-79xq-8xwm PaddlePaddle command injection in _wget_download |
Critical EPSS 1.18% |
< 2.6.0 | 2.6.0 |
| GHSA-jm68-fpmr-8j2g PaddlePaddle floating point exception in paddle.linalg.matrix_rank |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-qppw-c37g-xwcc PaddlePaddle nullptr dereference in paddle.crop |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-qppw-c37g-xwcc PaddlePaddle nullptr dereference in paddle.crop |
High EPSS 0.49% |
< 2.6.1 | 2.6.1 |
| GHSA-mr78-v55p-7777 PaddlePaddle segfault in paddle.mode |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-mr78-v55p-7777 PaddlePaddle segfault in paddle.mode |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-rf7p-79xq-8xwm PaddlePaddle command injection in _wget_download |
Critical EPSS 1.18% |
< 2.6.0 | 2.6.0 |
| GHSA-rg9q-m8hv-xxr6 PaddlePaddle floating point exception in paddle.lerp |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-rg9q-m8hv-xxr6 PaddlePaddle floating point exception in paddle.lerp |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-rx2r-q96c-w5cc PaddlePaddle floating point exception in paddle.topk |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-rx2r-q96c-w5cc PaddlePaddle floating point exception in paddle.topk |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-xjpw-hx47-rccv PaddlePaddle floating point exception in paddle.nanmedian |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-xjpw-hx47-rccv PaddlePaddle floating point exception in paddle.nanmedian |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-x3q9-c788-j7c8 PaddlePaddle segfault in paddle.dot |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-x3q9-c788-j7c8 PaddlePaddle segfault in paddle.dot |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-v9pg-qw6x-w5r2 PaddlePaddle floating point exception in paddle.amin |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-v9pg-qw6x-w5r2 PaddlePaddle floating point exception in paddle.amin |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-275c-w5mq-v5m2 PaddlePaddle floating point exception in paddle.argmin and paddle.argmax |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-275c-w5mq-v5m2 PaddlePaddle floating point exception in paddle.argmin and paddle.argmax |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-2wcj-qr76-9768 PaddlePaddle segfault in paddle.put_along_axis |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-2wcj-qr76-9768 PaddlePaddle segfault in paddle.put_along_axis |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-4rrv-8gcp-24v8 PaddlePaddle stack overflow in paddle.searchsorted |
Critical EPSS 0.58% |
< 2.6.0 | 2.6.0 |
| GHSA-4rrv-8gcp-24v8 PaddlePaddle stack overflow in paddle.searchsorted |
Critical EPSS 0.58% |
< 2.6.0 | 2.6.0 |
| GHSA-3cr5-2446-8pg3 PaddlePaddle command injection in convert_shape_compare |
Critical EPSS 1.18% |
< 2.6.0 | 2.6.0 |
| GHSA-3cr5-2446-8pg3 PaddlePaddle command injection in convert_shape_compare |
Critical EPSS 1.18% |
< 2.6.0 | 2.6.0 |
| GHSA-8fp7-jwv2-49x9 PaddlePaddle heap buffer overflow in paddle.repeat_interleave |
Critical EPSS 0.54% |
< 2.6.0 | 2.6.0 |
| GHSA-8fp7-jwv2-49x9 PaddlePaddle heap buffer overflow in paddle.repeat_interleave |
Critical EPSS 0.54% |
< 2.6.0 | 2.6.0 |
| GHSA-547m-23x7-cxg5 PaddlePaddle null pointer dereference in paddle.nextafter |
High EPSS 0.55% |
< 2.6.0 | 2.6.0 |
| GHSA-547m-23x7-cxg5 PaddlePaddle null pointer dereference in paddle.nextafter |
High EPSS 0.55% |
< 2.6.0 | 2.6.0 |
| GHSA-c6ph-m8cw-rfqh PaddlePaddle floating point exception in paddle.linalg.eig |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-c6ph-m8cw-rfqh PaddlePaddle floating point exception in paddle.linalg.eig |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-j5h9-9r39-43q5 PaddlePaddle command injection in get_online_pass_interval |
Critical EPSS 1.18% |
< 2.6.0 | 2.6.0 |
| GHSA-j5h9-9r39-43q5 PaddlePaddle command injection in get_online_pass_interval |
Critical EPSS 1.18% |
< 2.6.0 | 2.6.0 |
| GHSA-g57v-2687-jx33 PaddlePaddle stack overflow in paddle.linalg.lu_unpack |
Critical EPSS 0.53% |
< 2.6.0 | 2.6.0 |
| GHSA-g57v-2687-jx33 PaddlePaddle stack overflow in paddle.linalg.lu_unpack |
Critical EPSS 0.53% |
< 2.6.0 | 2.6.0 |
| GHSA-jm68-fpmr-8j2g PaddlePaddle floating point exception in paddle.linalg.matrix_rank |
High EPSS 0.49% |
< 2.6.0 | 2.6.0 |
| GHSA-cv2j-922j-hr56 Float point exception (FPE) in paddlepaddle |
Medium EPSS 0.74% |
< 2.5.0 | 2.5.0 |
| GHSA-cv2j-922j-hr56 Float point exception (FPE) in paddlepaddle |
Medium EPSS 0.74% |
< 2.5.0 | 2.5.0 |
| GHSA-9q9v-qgwx-84mr Command injection in PaddlePaddle |
Critical EPSS 2.34% |
< 2.5.0 | 2.5.0 |
| GHSA-9q9v-qgwx-84mr Command injection in PaddlePaddle |
Critical EPSS 2.34% |
< 2.5.0 | 2.5.0 |
| GHSA-hh7p-hvm3-rg88 Heap buffer overflow in PaddlePaddle |
High EPSS 0.76% |
< 2.5.0 | 2.5.0 |
| GHSA-rr46-m366-gm44 Null pointer dereference in PaddlePaddle |
Medium EPSS 0.66% |
< 2.5.0 | 2.5.0 |
| GHSA-rr46-m366-gm44 Null pointer dereference in PaddlePaddle |
Medium EPSS 0.66% |
< 2.5.0 | 2.5.0 |
| GHSA-hh7p-hvm3-rg88 Heap buffer overflow in PaddlePaddle |
High EPSS 0.76% |
< 2.5.0 | 2.5.0 |
| GHSA-8wfh-qxxv-3q8c Use after free in PaddlePaddle |
High EPSS 0.77% |
< 2.5.0 | 2.5.0 |
| GHSA-8wfh-qxxv-3q8c Use after free in PaddlePaddle |
High EPSS 0.77% |
< 2.5.0 | 2.5.0 |
| GHSA-2hvc-hwg3-hpvw PaddlePaddle Out-of-bounds Read vulnerability |
Critical EPSS 0.70% |
< 2.4 | 2.4 |
| GHSA-2hvc-hwg3-hpvw PaddlePaddle Out-of-bounds Read vulnerability |
Critical EPSS 0.70% |
< 2.4 | 2.4 |
| GHSA-gcjf-29m9-888q PaddlePaddle vulnerable to Code Injection |
Critical EPSS 1.19% |
< 2.4.0 | 2.4.0 |
| GHSA-gcjf-29m9-888q PaddlePaddle vulnerable to Code Injection |
Critical EPSS 1.19% |
< 2.4.0 | 2.4.0 |
| GHSA-83g7-8fch-p37m PaddlePaddle vulnerable to code injection via winstr |
Critical EPSS 1.40% |
< 2.4 | 2.4 |
| GHSA-83g7-8fch-p37m PaddlePaddle vulnerable to code injection via winstr |
Critical EPSS 1.40% |
< 2.4 | 2.4 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor