Critical · 9.3 CVE-2024-0817 EUVD-2024-0919GHSA-fh54-3vhg-mpc2PYSEC-2026-1754

PaddlePaddle command injection vulnerability

Published Mar 7, 2024 · Updated Apr 16, 2025 · Assigned by @huntr_ai

Description

Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0

Vendor	Product	Affected	Fixed
paddlepaddle	paddlepaddle/paddle	unspecified – ≤ latest	—

Ecosystem	Package	Affected	Fixed	Record
PyPI	paddlepaddle	<= 2.6.0	—	GHSA-fh54-3vhg-mpc2
PyPI	paddlepaddle	< 3.0.0-beta0	3.0.0-beta0	PYSEC-2026-1754