Information Exposure Affecting nvidia-pytriton package, versions [0,]


Severity

Recommended
0.0
high
0
10

CVSS assessment by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.07% (22nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Information Exposure vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-PYTHON-NVIDIAPYTRITON-13047200
  • published26 Sept 2025
  • disclosed6 Aug 2025
  • creditRonen Shustin, Nir Ohfeld, Hillai Ben-Sasson, Andres Riancho, Yuval Avrahami

Introduced: 6 Aug 2025

CVE-2025-23320  (opens in a new tab)
CWE-209  (opens in a new tab)

How to fix?

There is no fixed version for nvidia-pytriton.

Overview

nvidia-pytriton is a PyTriton - Flask/FastAPI-like interface to simplify Triton's deployment in Python environments.

Affected versions of this package are vulnerable to Information Exposure via the SharedMemoryManager::GrowIfNeeded function in the bundled Python backend. An attacker could cause the shared memory limit to be exceeded by sending a large request, leading to information disclosure. The resulting error message improperly includes the unique name of the backend's internal IPC shared memory region.

CVSS Base Scores

version 4.0
version 3.1