nvflare vulnerabilities (PyPI)

5 vulnerabilities.

• nvflare PyPI NVIDIA NVFlare Dashboard: Authorization bypass through user-controlled key via user management and authentication system CVE-2026-24178 Fix available 9.8 CriticalApril 28, 2026
• nvflare PyPI NVFLARE unsafe deserialization due to Pickle CVE-2022-34668 Public exploitFix available EPSS 11.6% 9.8 CriticalAugust 29, 2022
• nvflare PyPI Unsafe yaml deserialization in NVFlare CVE-2022-31605 Fix available 9.8 CriticalJune 22, 2022
• nvflare PyPI Unsafe deserialisation in the PKI implementation scheme of NVFlare CVE-2022-31604 Fix available 9.8 CriticalJune 22, 2022
• nvflare PyPI Allocation of Resources Without Limits or Throttling in nvflare CVE-2022-21822 Fix available 7.5 HighMarch 17, 2022