{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2025-33245", "tracking": { "current_release_date": "2026-03-22T06:08:36.268706Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2025-33245", "initial_release_date": "2025-11-08T06:29:41.343508Z", "revision_history": [ { "date": "2025-11-08T06:29:41.343508Z", "number": "1", "summary": "NCSC Score created." }, { "date": "2026-02-18T14:25:52.955590Z", "number": "2", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (3).| CWES updated (1)." }, { "date": "2026-02-18T14:26:01.105440Z", "number": "3", "summary": "NCSC Score updated." }, { "date": "2026-02-18T14:39:06.918754Z", "number": "4", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| References created (3).| CWES updated (1)." }, { "date": "2026-02-18T14:39:12.553350Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-02-18T15:38:22.479549Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-02-18T16:05:45.925498Z", "number": "7", "summary": "Unknown change." }, { "date": "2026-02-19T14:43:59.428627Z", "number": "8", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-02-19T14:44:08.783427Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-02-20T20:26:18.787321Z", "number": "10", "summary": "Products connected (1).| Product Identifiers created (1)." }, { "date": "2026-02-20T20:26:21.006080Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-02-20T22:39:50.137767Z", "number": "12", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-02-20T22:39:51.896775Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-02-21T00:35:38.849088Z", "number": "14", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (103).| Product Identifiers created (102).| References created (3).| CWES updated (1)." }, { "date": "2026-02-21T14:14:18.540319Z", "number": "15", "summary": "EPSS updated." }, { "date": "2026-02-21T14:14:25.195153Z", "number": "16", "summary": "NCSC Score updated." }, { "date": "2026-02-23T02:30:07.329609Z", "number": "17", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (16).| Products created (1).| References created (3)." }, { "date": "2026-02-23T02:30:17.287045Z", "number": "18", "summary": "NCSC Score updated." }, { "date": "2026-03-15T22:38:29.205917Z", "number": "19", "summary": "EPSS updated." }, { "date": "2026-03-19T21:42:43.430901Z", "number": "20", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T04:12:48.199520Z", "number": "21", "summary": "NCSC Score updated." }, { "date": "2026-03-22T06:08:23.363607Z", "number": "22", "summary": "EPSS updated." }, { "date": "2026-03-22T06:08:32.937972Z", "number": "23", "summary": "NCSC Score updated." } ], "status": "interim", "version": "23" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/allversionspriorto2.6.1", "product": { "name": "vers:unknown/allversionspriorto2.6.1", "product_id": "CSAFPID-5629095" } } ], "category": "product_name", "name": "NeMo Framework" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<2.6.1", "product": { "name": "vers:unknown/<2.6.1", "product_id": "CSAFPID-5652549", "product_identification_helper": { "cpe": "cpe:2.3:a:nvidia:nemo:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/r0.8", "product": { "name": "vers:unknown/r0.8", "product_id": "CSAFPID-3800486" } }, { "category": "product_version_range", "name": "vers:unknown/v0.10.0", "product": { "name": "vers:unknown/v0.10.0", "product_id": "CSAFPID-3800487" } }, { "category": "product_version_range", "name": "vers:unknown/v0.10.1", "product": { "name": "vers:unknown/v0.10.1", "product_id": "CSAFPID-3800488" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.1", "product": { "name": "vers:unknown/v0.8.1", "product_id": "CSAFPID-3800489" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.2", "product": { "name": "vers:unknown/v0.8.2", "product_id": "CSAFPID-3800490" } }, { "category": "product_version_range", "name": "vers:unknown/v0.9.0", "product": { "name": "vers:unknown/v0.9.0", "product_id": "CSAFPID-3800491" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0", "product": { "name": "vers:unknown/v1.0.0", "product_id": "CSAFPID-3800492" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0b1", "product": { "name": "vers:unknown/v1.0.0b1", "product_id": "CSAFPID-3800493" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0b2", "product": { "name": "vers:unknown/v1.0.0b2", "product_id": "CSAFPID-3800494" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.0rc1", "product": { "name": "vers:unknown/v1.0.0rc1", "product_id": "CSAFPID-3800495" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.1", "product": { "name": "vers:unknown/v1.0.1", "product_id": "CSAFPID-3800496" } }, { "category": "product_version_range", "name": "vers:unknown/v1.0.2", "product": { "name": "vers:unknown/v1.0.2", "product_id": "CSAFPID-3800497" } }, { "category": "product_version_range", "name": "vers:unknown/v1.6.2", "product": { "name": "vers:unknown/v1.6.2", "product_id": "CSAFPID-3800498" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.0rc0", "product": { "name": "vers:unknown/v2.2.0rc0", "product_id": "CSAFPID-3800499" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.0rc1", "product": { "name": "vers:unknown/v2.2.0rc1", "product_id": "CSAFPID-3800500" } }, { "category": "product_version_range", "name": "vers:unknown/v2.5.0rc0", "product": { "name": "vers:unknown/v2.5.0rc0", "product_id": "CSAFPID-5200539" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.0", "product": { "name": "vers:unknown/v2.6.0", "product_id": "CSAFPID-5668124" } } ], "category": "product_name", "name": "nemo" } ], "category": "vendor", "name": "Nvidia" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.10.0", "product": { "name": "vers:unknown/0.10.0", "product_id": "CSAFPID-5656218", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0b0", "product": { "name": "vers:unknown/0.10.0b0", "product_id": "CSAFPID-5656219", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0b0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0b1", "product": { "name": "vers:unknown/0.10.0b1", "product_id": "CSAFPID-5656220", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0b1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0b10", "product": { "name": "vers:unknown/0.10.0b10", "product_id": "CSAFPID-5656221", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0b10" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0b2", "product": { "name": "vers:unknown/0.10.0b2", "product_id": "CSAFPID-5656222", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0b2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0b3", "product": { "name": "vers:unknown/0.10.0b3", "product_id": "CSAFPID-5656223", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0b3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0b4", "product": { "name": "vers:unknown/0.10.0b4", "product_id": "CSAFPID-5656224", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0b4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0b5", "product": { "name": "vers:unknown/0.10.0b5", "product_id": "CSAFPID-5656225", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0b5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0b6", "product": { "name": "vers:unknown/0.10.0b6", "product_id": "CSAFPID-5656226", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0b6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0b7", "product": { "name": "vers:unknown/0.10.0b7", "product_id": "CSAFPID-5656227", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0b7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0b8", "product": { "name": "vers:unknown/0.10.0b8", "product_id": "CSAFPID-5656228", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0b8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.0b9", "product": { "name": "vers:unknown/0.10.0b9", "product_id": "CSAFPID-5656229", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.0b9" } } }, { "category": "product_version_range", "name": "vers:unknown/0.10.1", "product": { "name": "vers:unknown/0.10.1", "product_id": "CSAFPID-5656230", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.10.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0", "product": { "name": "vers:unknown/0.11.0", "product_id": "CSAFPID-5656231", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0b1", "product": { "name": "vers:unknown/0.11.0b1", "product_id": "CSAFPID-5656232", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0b1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0b10", "product": { "name": "vers:unknown/0.11.0b10", "product_id": "CSAFPID-5656233", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0b10" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0b11", "product": { "name": "vers:unknown/0.11.0b11", "product_id": "CSAFPID-5656234", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0b11" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0b12", "product": { "name": "vers:unknown/0.11.0b12", "product_id": "CSAFPID-5656235", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0b12" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0b14", "product": { "name": "vers:unknown/0.11.0b14", "product_id": "CSAFPID-5656236", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0b14" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0b2", "product": { "name": "vers:unknown/0.11.0b2", "product_id": "CSAFPID-5656237", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0b2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0b3", "product": { "name": "vers:unknown/0.11.0b3", "product_id": "CSAFPID-5656238", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0b3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0b4", "product": { "name": "vers:unknown/0.11.0b4", "product_id": "CSAFPID-5656239", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0b4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0b5", "product": { "name": "vers:unknown/0.11.0b5", "product_id": "CSAFPID-5656240", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0b5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0b6", "product": { "name": "vers:unknown/0.11.0b6", "product_id": "CSAFPID-5656241", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0b6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.11.0b8", "product": { "name": "vers:unknown/0.11.0b8", "product_id": "CSAFPID-5656242", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.11.0b8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8", "product": { "name": "vers:unknown/0.8", "product_id": "CSAFPID-5656243", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.1", "product": { "name": "vers:unknown/0.8.1", "product_id": "CSAFPID-5656244", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.2", "product": { "name": "vers:unknown/0.8.2", "product_id": "CSAFPID-5656245", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.8.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.9.0", "product": { "name": "vers:unknown/0.9.0", "product_id": "CSAFPID-5656246", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@0.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0", "product": { "name": "vers:unknown/1.0.0", "product_id": "CSAFPID-5656247", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0a4", "product": { "name": "vers:unknown/1.0.0a4", "product_id": "CSAFPID-5656248", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.0.0a4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0b0", "product": { "name": "vers:unknown/1.0.0b0", "product_id": "CSAFPID-5656249", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.0.0b0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0b1", "product": { "name": "vers:unknown/1.0.0b1", "product_id": "CSAFPID-5656250", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.0.0b1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0b2", "product": { "name": "vers:unknown/1.0.0b2", "product_id": "CSAFPID-5656251", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.0.0b2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0b3", "product": { "name": "vers:unknown/1.0.0b3", "product_id": "CSAFPID-5656252", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.0.0b3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0rc1", "product": { "name": "vers:unknown/1.0.0rc1", "product_id": "CSAFPID-5656253", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.0.0rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.1", "product": { "name": "vers:unknown/1.0.1", "product_id": "CSAFPID-5656254", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.2", "product": { "name": "vers:unknown/1.0.2", "product_id": "CSAFPID-5656255", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0", "product": { "name": "vers:unknown/1.1.0", "product_id": "CSAFPID-5656256", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.0", "product": { "name": "vers:unknown/1.10.0", "product_id": "CSAFPID-5656257", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.0", "product": { "name": "vers:unknown/1.11.0", "product_id": "CSAFPID-5656258", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.0", "product": { "name": "vers:unknown/1.12.0", "product_id": "CSAFPID-5656259", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.13.0", "product": { "name": "vers:unknown/1.13.0", "product_id": "CSAFPID-5656260", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.13.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.14.0", "product": { "name": "vers:unknown/1.14.0", "product_id": "CSAFPID-5656261", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.14.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.15.0", "product": { "name": "vers:unknown/1.15.0", "product_id": "CSAFPID-5656262", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.15.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.16.0", "product": { "name": "vers:unknown/1.16.0", "product_id": "CSAFPID-5656263", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.16.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.17.0", "product": { "name": "vers:unknown/1.17.0", "product_id": "CSAFPID-5656264", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.17.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.18.0", "product": { "name": "vers:unknown/1.18.0", "product_id": "CSAFPID-5656265", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.18.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.18.1", "product": { "name": "vers:unknown/1.18.1", "product_id": "CSAFPID-5656266", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.18.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.19.0", "product": { "name": "vers:unknown/1.19.0", "product_id": "CSAFPID-5656267", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.19.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.19.1", "product": { "name": "vers:unknown/1.19.1", "product_id": "CSAFPID-5656268", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.19.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0", "product": { "name": "vers:unknown/1.2.0", "product_id": "CSAFPID-5656269", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.20.0", "product": { "name": "vers:unknown/1.20.0", "product_id": "CSAFPID-5656270", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.20.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.21.0", "product": { "name": "vers:unknown/1.21.0", "product_id": "CSAFPID-5656271", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.21.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.22.0", "product": { "name": "vers:unknown/1.22.0", "product_id": "CSAFPID-5656272", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.22.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.23.0", "product": { "name": "vers:unknown/1.23.0", "product_id": "CSAFPID-5656273", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.23.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0", "product": { "name": "vers:unknown/1.3.0", "product_id": "CSAFPID-5656274", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.0", "product": { "name": "vers:unknown/1.4.0", "product_id": "CSAFPID-5656275", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.0", "product": { "name": "vers:unknown/1.5.0", "product_id": "CSAFPID-5656276", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.1", "product": { "name": "vers:unknown/1.5.1", "product_id": "CSAFPID-5656277", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6.0", "product": { "name": "vers:unknown/1.6.0", "product_id": "CSAFPID-5656278", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6.1", "product": { "name": "vers:unknown/1.6.1", "product_id": "CSAFPID-5656279", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.6.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6.2", "product": { "name": "vers:unknown/1.6.2", "product_id": "CSAFPID-5656280", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.6.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0", "product": { "name": "vers:unknown/1.7.0", "product_id": "CSAFPID-5656281", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.1", "product": { "name": "vers:unknown/1.7.1", "product_id": "CSAFPID-5656282", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.7.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.2", "product": { "name": "vers:unknown/1.7.2", "product_id": "CSAFPID-5656283", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.7.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.8.0", "product": { "name": "vers:unknown/1.8.0", "product_id": "CSAFPID-5656284", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.8.1", "product": { "name": "vers:unknown/1.8.1", "product_id": "CSAFPID-5656285", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.8.2", "product": { "name": "vers:unknown/1.8.2", "product_id": "CSAFPID-5656286", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.8.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.0", "product": { "name": "vers:unknown/1.9.0", "product_id": "CSAFPID-5656287", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@1.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.0.0", "product": { "name": "vers:unknown/2.0.0", "product_id": "CSAFPID-5656288", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.0.0rc0", "product": { "name": "vers:unknown/2.0.0rc0", "product_id": "CSAFPID-5656289", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.0.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.0.0rc1", "product": { "name": "vers:unknown/2.0.0rc1", "product_id": "CSAFPID-5656290", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.0.0rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0", "product": { "name": "vers:unknown/2.1.0", "product_id": "CSAFPID-5656291", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0rc0", "product": { "name": "vers:unknown/2.1.0rc0", "product_id": "CSAFPID-5656292", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.1.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0rc1", "product": { "name": "vers:unknown/2.1.0rc1", "product_id": "CSAFPID-5656293", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.1.0rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0rc2", "product": { "name": "vers:unknown/2.1.0rc2", "product_id": "CSAFPID-5656294", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.1.0rc2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.2.0", "product": { "name": "vers:unknown/2.2.0", "product_id": "CSAFPID-5656295", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.2.0rc0", "product": { "name": "vers:unknown/2.2.0rc0", "product_id": "CSAFPID-5656296", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.2.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.2.0rc1", "product": { "name": "vers:unknown/2.2.0rc1", "product_id": "CSAFPID-5656297", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.2.0rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.2.0rc2", "product": { "name": "vers:unknown/2.2.0rc2", "product_id": "CSAFPID-5656298", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.2.0rc2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.2.0rc3", "product": { "name": "vers:unknown/2.2.0rc3", "product_id": "CSAFPID-5656299", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.2.0rc3" } } }, { "category": "product_version_range", "name": "vers:unknown/2.2.1", "product": { "name": "vers:unknown/2.2.1", "product_id": "CSAFPID-5656300", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.0", "product": { "name": "vers:unknown/2.3.0", "product_id": "CSAFPID-5656301", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.0rc2", "product": { "name": "vers:unknown/2.3.0rc2", "product_id": "CSAFPID-5656302", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.3.0rc2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.0rc3", "product": { "name": "vers:unknown/2.3.0rc3", "product_id": "CSAFPID-5656303", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.3.0rc3" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.0rc4", "product": { "name": "vers:unknown/2.3.0rc4", "product_id": "CSAFPID-5656304", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.3.0rc4" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.1", "product": { "name": "vers:unknown/2.3.1", "product_id": "CSAFPID-5656305", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.2", "product": { "name": "vers:unknown/2.3.2", "product_id": "CSAFPID-5656306", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.3.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.3", "product": { "name": "vers:unknown/2.3.3", "product_id": "CSAFPID-5656307", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.3.3" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.0", "product": { "name": "vers:unknown/2.4.0", "product_id": "CSAFPID-5656308", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.0rc0", "product": { "name": "vers:unknown/2.4.0rc0", "product_id": "CSAFPID-5656309", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.4.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.0rc1", "product": { "name": "vers:unknown/2.4.0rc1", "product_id": "CSAFPID-5656310", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.4.0rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.0rc2", "product": { "name": "vers:unknown/2.4.0rc2", "product_id": "CSAFPID-5656311", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.4.0rc2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.1", "product": { "name": "vers:unknown/2.4.1", "product_id": "CSAFPID-5656312", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.5.0", "product": { "name": "vers:unknown/2.5.0", "product_id": "CSAFPID-5656313", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.5.0rc0", "product": { "name": "vers:unknown/2.5.0rc0", "product_id": "CSAFPID-5656314", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.5.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.5.1", "product": { "name": "vers:unknown/2.5.1", "product_id": "CSAFPID-5656315", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.5.2", "product": { "name": "vers:unknown/2.5.2", "product_id": "CSAFPID-5656316", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.5.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.5.3", "product": { "name": "vers:unknown/2.5.3", "product_id": "CSAFPID-5656317", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.5.3" } } }, { "category": "product_version_range", "name": "vers:unknown/2.6.0", "product": { "name": "vers:unknown/2.6.0", "product_id": "CSAFPID-5656318", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.6.0rc0", "product": { "name": "vers:unknown/2.6.0rc0", "product_id": "CSAFPID-5656319", "product_identification_helper": { "purl": "pkg:pypi/nemo-toolkit@2.6.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<2.6.1", "product": { "name": "vers:unknown/>=0|<2.6.1", "product_id": "CSAFPID-5656320" } } ], "category": "product_name", "name": "nemo-toolkit" } ], "category": "vendor", "name": "NVIDIA-NeMo" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-33245", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "notes": [ { "category": "description", "text": "NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2025-33245" }, { "category": "description", "text": "NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2025-33245" }, { "category": "description", "text": "NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.", "title": "github - https://github.com/advisories/GHSA-9379-mwvr-7wxx" }, { "category": "description", "text": "NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-9379-mwvr-7wxx.json?alt=media" }, { "category": "description", "text": "NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2025-33245.json?alt=media" }, { "category": "other", "text": "0.00252", "title": "EPSS" }, { "category": "other", "text": "4.5", "title": "NCSC Score" }, { "category": "other", "text": "Is related to CWE-502 (Deserialization of Untrusted Data)", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-5629095", "CSAFPID-5652549", "CSAFPID-5656218", "CSAFPID-5656219", "CSAFPID-5656220", "CSAFPID-5656221", "CSAFPID-5656222", "CSAFPID-5656223", "CSAFPID-5656224", "CSAFPID-5656225", "CSAFPID-5656226", "CSAFPID-5656227", "CSAFPID-5656228", "CSAFPID-5656229", "CSAFPID-5656230", "CSAFPID-5656231", "CSAFPID-5656232", "CSAFPID-5656233", "CSAFPID-5656234", "CSAFPID-5656235", "CSAFPID-5656236", "CSAFPID-5656237", "CSAFPID-5656238", "CSAFPID-5656239", "CSAFPID-5656240", "CSAFPID-5656241", "CSAFPID-5656242", "CSAFPID-5656243", "CSAFPID-5656244", "CSAFPID-5656245", "CSAFPID-5656246", "CSAFPID-5656247", "CSAFPID-5656248", "CSAFPID-5656249", "CSAFPID-5656250", "CSAFPID-5656251", "CSAFPID-5656252", "CSAFPID-5656253", "CSAFPID-5656254", "CSAFPID-5656255", "CSAFPID-5656256", "CSAFPID-5656257", "CSAFPID-5656258", "CSAFPID-5656259", "CSAFPID-5656260", "CSAFPID-5656261", "CSAFPID-5656262", "CSAFPID-5656263", "CSAFPID-5656264", "CSAFPID-5656265", "CSAFPID-5656266", "CSAFPID-5656267", "CSAFPID-5656268", "CSAFPID-5656269", "CSAFPID-5656270", "CSAFPID-5656271", "CSAFPID-5656272", "CSAFPID-5656273", "CSAFPID-5656274", "CSAFPID-5656275", "CSAFPID-5656276", "CSAFPID-5656277", "CSAFPID-5656278", "CSAFPID-5656279", "CSAFPID-5656280", "CSAFPID-5656281", "CSAFPID-5656282", "CSAFPID-5656283", "CSAFPID-5656284", "CSAFPID-5656285", "CSAFPID-5656286", "CSAFPID-5656287", "CSAFPID-5656288", "CSAFPID-5656289", "CSAFPID-5656290", "CSAFPID-5656291", "CSAFPID-5656292", "CSAFPID-5656293", "CSAFPID-5656294", "CSAFPID-5656295", "CSAFPID-5656296", "CSAFPID-5656297", "CSAFPID-5656298", "CSAFPID-5656299", "CSAFPID-5656300", "CSAFPID-5656301", "CSAFPID-5656302", "CSAFPID-5656303", "CSAFPID-5656304", "CSAFPID-5656305", "CSAFPID-5656306", "CSAFPID-5656307", "CSAFPID-5656308", "CSAFPID-5656309", "CSAFPID-5656310", "CSAFPID-5656311", "CSAFPID-5656312", "CSAFPID-5656313", "CSAFPID-5656314", "CSAFPID-5656315", "CSAFPID-5656316", "CSAFPID-5656317", "CSAFPID-5656318", "CSAFPID-5656319", "CSAFPID-5656320", "CSAFPID-3800486", "CSAFPID-3800487", "CSAFPID-3800488", "CSAFPID-3800489", "CSAFPID-3800490", "CSAFPID-3800491", "CSAFPID-3800492", "CSAFPID-3800493", "CSAFPID-3800494", "CSAFPID-3800495", "CSAFPID-3800496", "CSAFPID-3800497", "CSAFPID-3800498", "CSAFPID-3800499", "CSAFPID-3800500", "CSAFPID-5200539", "CSAFPID-5668124" ] }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33245" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-33245" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2025-33245" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/33xxx/CVE-2025-33245.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-33245" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=20000" }, { "category": "external", "summary": "Source - github", "url": "https://github.com/advisories/GHSA-9379-mwvr-7wxx" }, { "category": "external", "summary": "Source raw - github", "url": "https://api.github.com/advisories/GHSA-9379-mwvr-7wxx" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-9379-mwvr-7wxx.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2025-33245.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=30000" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33245" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5762" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://www.cve.org/CVERecord?id=CVE-2025-33245" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-9379-mwvr-7wxx" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-3800486", "CSAFPID-3800487", "CSAFPID-3800488", "CSAFPID-3800489", "CSAFPID-3800490", "CSAFPID-3800491", "CSAFPID-3800492", "CSAFPID-3800493", "CSAFPID-3800494", "CSAFPID-3800495", "CSAFPID-3800496", "CSAFPID-3800497", "CSAFPID-3800498", "CSAFPID-3800499", "CSAFPID-3800500", "CSAFPID-5200539", "CSAFPID-5629095", "CSAFPID-5652549", "CSAFPID-5656218", "CSAFPID-5656219", "CSAFPID-5656220", "CSAFPID-5656221", "CSAFPID-5656222", "CSAFPID-5656223", "CSAFPID-5656224", "CSAFPID-5656225", "CSAFPID-5656226", "CSAFPID-5656227", "CSAFPID-5656228", "CSAFPID-5656229", "CSAFPID-5656230", "CSAFPID-5656231", "CSAFPID-5656232", "CSAFPID-5656233", "CSAFPID-5656234", "CSAFPID-5656235", "CSAFPID-5656236", "CSAFPID-5656237", "CSAFPID-5656238", "CSAFPID-5656239", "CSAFPID-5656240", "CSAFPID-5656241", "CSAFPID-5656242", "CSAFPID-5656243", "CSAFPID-5656244", "CSAFPID-5656245", "CSAFPID-5656246", "CSAFPID-5656247", "CSAFPID-5656248", "CSAFPID-5656249", "CSAFPID-5656250", "CSAFPID-5656251", "CSAFPID-5656252", "CSAFPID-5656253", "CSAFPID-5656254", "CSAFPID-5656255", "CSAFPID-5656256", "CSAFPID-5656257", "CSAFPID-5656258", "CSAFPID-5656259", "CSAFPID-5656260", "CSAFPID-5656261", "CSAFPID-5656262", "CSAFPID-5656263", "CSAFPID-5656264", "CSAFPID-5656265", "CSAFPID-5656266", "CSAFPID-5656267", "CSAFPID-5656268", "CSAFPID-5656269", "CSAFPID-5656270", "CSAFPID-5656271", "CSAFPID-5656272", "CSAFPID-5656273", "CSAFPID-5656274", "CSAFPID-5656275", "CSAFPID-5656276", "CSAFPID-5656277", "CSAFPID-5656278", "CSAFPID-5656279", "CSAFPID-5656280", "CSAFPID-5656281", "CSAFPID-5656282", "CSAFPID-5656283", "CSAFPID-5656284", "CSAFPID-5656285", "CSAFPID-5656286", "CSAFPID-5656287", "CSAFPID-5656288", "CSAFPID-5656289", "CSAFPID-5656290", "CSAFPID-5656291", "CSAFPID-5656292", "CSAFPID-5656293", "CSAFPID-5656294", "CSAFPID-5656295", "CSAFPID-5656296", "CSAFPID-5656297", "CSAFPID-5656298", "CSAFPID-5656299", "CSAFPID-5656300", "CSAFPID-5656301", "CSAFPID-5656302", "CSAFPID-5656303", "CSAFPID-5656304", "CSAFPID-5656305", "CSAFPID-5656306", "CSAFPID-5656307", "CSAFPID-5656308", "CSAFPID-5656309", "CSAFPID-5656310", "CSAFPID-5656311", "CSAFPID-5656312", "CSAFPID-5656313", "CSAFPID-5656314", "CSAFPID-5656315", "CSAFPID-5656316", "CSAFPID-5656317", "CSAFPID-5656318", "CSAFPID-5656319", "CSAFPID-5656320", "CSAFPID-5668124" ] } ], "title": "CVE-2025-33245" } ] }