p
paddlepaddle
Security Risk Profile
45
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 35 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 11, 2022 to present
35
Total CVEs
33
Critical+High
0
Exploited
6
Unpatched
Threat Assessment
Avg CVSS
8.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
6
Critical/High
Risk Level
45/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
18High
15Medium
1Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Divide by Zero
8
2
Command Injection
6
3
Code Injection
5
4
OS Command Injection
5
5
Null Pointer Dereference
5
Most Affected Products
1. PaddlePaddle paddlepaddle31
2. pip/PaddlePaddle16
3. pip/paddlepaddle14
4. PaddlePaddle PaddleX1
5. PaddlePaddle FastDeploy1
Recent Vulnerabilities
See more →CVE-2026-108961
CVSS 5.3medium
PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection
Oct 13, 2026🔧 No Patch
CVE-2026-10800
CVSS 2.0low
PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hash
Jun 4, 2026🔧 No Patch
CVE-2024-1603
CVSS 8.2high
confirmed
Mar 23, 2024🔧 No Patch
CVE-2024-0818
CVSS 9.1critical
confirmed
Mar 7, 2024🔧 No Patch
CVE-2024-0917
CVSS 9.8critical
confirmed
Mar 7, 2024🔧 No Patch
CVE-2024-0815
CVSS 9.3critical
confirmed
Mar 7, 2024🔧 No Patch
CVE-2024-0817
CVSS 9.3critical
confirmed
Mar 7, 2024🔧 No Patch
CVE-2024-0521
CVSS 9.3EPSS 0%critical
Code Injection in paddlepaddle/paddle
Jan 20, 2024
CVE-2023-52314
CVSS 9.8critical
Command injection in convert_shape_compare
Jan 3, 2024
CVE-2023-52313
CVSS 7.5high
FPE in paddle.argmin and paddle.argmax
Jan 3, 2024
Monitor paddlepaddle in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.