Skip to content
OpenAdvisories
High · 7.5 CVE-2022-21822 EUVD-2022-1464GHSA-jx8f-cpx7-fv47PYSEC-2026-695

Allocation of Resources Without Limits or Throttling in nvflare

Published Mar 17, 2022 · Updated Aug 3, 2024 · Assigned by nvidia

Description

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA FLARE All versions prior to 2.0.16 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI nvflare < 2.0.16 2.0.16 GHSA-jx8f-cpx7-fv47

References