How many PaddlePaddle paddlex CVEs are in CISA KEV?

None of PaddlePaddle paddlex's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of PaddlePaddle paddlex are affected?

3 distinct PaddlePaddle paddlex versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in PaddlePaddle paddlex CVEs?

PaddlePaddle paddlex's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')).

What is the average severity of PaddlePaddle paddlex CVEs?

The average CVSS base score across PaddlePaddle paddlex's scored CVEs is 5.3.

PaddlePaddle paddlex Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: PaddlePaddle paddlex vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

PaddlePaddle paddlex Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

PaddlePaddle paddlex has 1 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.3.

Severity and exploitation

How the CVSS severity of PaddlePaddle paddlex's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of PaddlePaddle paddlex's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No PaddlePaddle paddlex CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every PaddlePaddle paddlex version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

3.7.01 CVE
3.7.11 CVE
3.7.21 CVE

Find a version

1 CVE

Sort

PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection
CVE-2026-108961
Patch
CWE-94
Medium · CVSS 5.3
EPSS 0.4% (33th pct)2026-10-13

Common weakness types

The CWE weakness categories most often found in PaddlePaddle paddlex CVEs. Follow any weakness for its full explanation.

CWE-94Improper Control of Generation of Code ('Code Injection')1 CVE

Other PaddlePaddle products

Browse vulnerabilities for other products by PaddlePaddle.

paddle32 CVEs paddlepaddle32 CVEs paddlepaddle/paddle6 CVEs anakin1 CVEs FastDeploy1 CVEs

All PaddlePaddle vulnerabilities

Frequently asked questions

Common questions about PaddlePaddle paddlex vulnerabilities.

How many CVEs does PaddlePaddle paddlex have?: PaddlePaddle paddlex has 1 published CVE records since 2026.
How many PaddlePaddle paddlex CVEs are in CISA KEV?: None of PaddlePaddle paddlex's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for PaddlePaddle paddlex vulnerabilities?: No PaddlePaddle paddlex CVEs currently have a tracked public exploit in this dataset.
Which versions of PaddlePaddle paddlex are affected?: 3 distinct PaddlePaddle paddlex versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in PaddlePaddle paddlex CVEs?: PaddlePaddle paddlex's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')).
What is the average severity of PaddlePaddle paddlex CVEs?: The average CVSS base score across PaddlePaddle paddlex's scored CVEs is 5.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track PaddlePaddle paddlex vulnerabilities

Get an alert for each new PaddlePaddle paddlex CVE, with AI-written analysis and remediation steps.

Create an account See pricing