CVEs published November 26, 2022
4 CVEs were published on November 26, 2022: 3 critical, 1 high.
- Published
- 4
- Critical
- 3
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- paddlepaddle
- 1
- qs
- 1
- torch
- 1
Critical 3
- CVE-2022-45907In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.torch
- CVE-2022-45908In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winspaddlepaddle
- CVE-2022-45909drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.