Loading HuntDB...

GHSA-f3m5-v6q6-4c4h

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering.

Related CVEs

Key Information

GHSA ID
GHSA-f3m5-v6q6-4c4h
Published
October 15, 2024 6:30 AM
Last Modified
October 15, 2024 6:30 AM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: November 24, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.