Is paddlepaddle safe ? 32 known vulnerabilities, worst severity CRITICAL.
// reach 9 direct dependencies
5 carry known advisories, worst CRITICAL
6 packages depend on it
an advisory here reaches each of them
// ai models 3 published models carry an advisory from this package
0 pin a version the advisory is confirmed against; the rest declare it without a version.
4 published models
1 declared · 0 observed · 3 inferred
4 published AI models are associated with this package: 1 name it in a requirements or pyproject file, 0 load it or import it directly, and 3 are inferred from the runtime stack their declared library pulls in. Only 1 state a version requirement, so this is not a count of affected models.
cvss CVSS v3.1 base score out of 10
epss chance of exploitation in 30 days, 65th percentile of all CVEs
xyz score CyberXYZ composite out of 10
fig. 01 — GHSA-2rp8-hff9-c5wr, the advisory selected below
// 32 advisories GHSA-2rp8-hff9-c5wr Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6 CRIT GHSA-mrmm-qmrj-xgp6 remote code execution in paddlepaddle/paddle 2.6.0 CRIT GHSA-chj7-w3f6-cvfj The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands. CRIT GHSA-rf7p-79xq-8xwm PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system. CRIT GHSA-3cr5-2446-8pg3 PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operating system. CRIT GHSA-j5h9-9r39-43q5 PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system. CRIT GHSA-9q9v-qgwx-84mr PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system. CRIT GHSA-gcjf-29m9-888q Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. A patch is available on the develop branch of the repository and anticipated to be part of a 2.4 release. CRIT GHSA-2hvc-hwg3-hpvw Out-of-bounds read in gather_tree in PaddlePaddle before 2.4. A patch is available in the release/2.4 branch. CRIT GHSA-83g7-8fch-p37m In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution. CRIT Show all 32 advisories Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6
// cvss v3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Scope Unchanged
Confidentiality None
Integrity High
Availability High Checked 2026-11-07 at 00:02 UTC. The most recent advisory here was published 2024-03-23. Updated continuously from NVD, GHSA, OSV and CNA feeds.
Think a verdict here is wrong? Tell us — we respond within 2 business days. Report an issue with this page