nemo-toolkit vulnerabilities
CVEs whose affected-version data names the nemo-toolkit package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-24159High· 7.8NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution
▾ Twilightnemo-toolkit · nemo-toolkitEPSS 0.64%via OSV
CVE-2026-24157High· 7.8NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading
▾ Twilightnemo-toolkit · nemo-toolkitEPSS 0.65%via OSV
CVE-2025-33253High· 7.8NVIDIA NeMo Framework Deserializes Untrusted Data
NVIDIA NeMo Framework Deserializes Untrusted Data
▾ Twilightnemo-toolkit · nemo-toolkitEPSS 0.19%via OSV
CVE-2025-33245High· 8.0NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution
▾ Twilightnemo-toolkit · nemo-toolkitEPSS 0.54%via OSV
CVE-2022-22821Medium· 4.4Path Traversal in nemo-toolkit
Path Traversal in nemo-toolkit
▾ Sunlitnemo-toolkit · nemo-toolkitEPSS 0.30%via OSV