<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 05:21:03 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-0521 — Code Injection in paddlepaddle/paddle</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-0521</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; paddlepaddle/paddle&lt;/p&gt;
&lt;p&gt;Code Injection in paddlepaddle/paddle&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; paddlepaddle/paddle&lt;/p&gt;
&lt;p&gt;Code Injection in paddlepaddle/paddle&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-0521</guid>
    </item>
    <item>
      <title>GHSA-chj7-w3f6-cvfj — Code Injection in paddlepaddle</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-chj7-w3f6-cvfj</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: paddlepaddle&lt;/p&gt;
&lt;p&gt;The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: paddlepaddle&lt;/p&gt;
&lt;p&gt;The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-chj7-w3f6-cvfj</guid>
    </item>
  </channel>
</rss>
