PYSEC-2026-3216 TensorFlow vulnerable to `CHECK` fail in `Unbatch`

Impact When Unbatch receives a nonscalar input id, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg0=tf.constantvalue=np.random.randomsize=3, 3, 1, dtype=tf.float64 arg1=tf.constantvalue=np.random.randint0,100,size=3, 3, 1,...

PYSEC-2026-3291 TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions

Impact When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. python import tensorflow as tf class QuantConv2DTransposedtf.keras.layers.Layer: def buildself, inputshape: self.kernel = self.addweight"kernel", 3, 3,...

CVE-2024-5846

creationtimestamp| type| source ---|---|--- 2026-07-13 14:00:06+00:00| seen| https://t.me/truesecator/8341 2026-07-14 00:00:44+00:00| seen| https://t.me/truesecator/8341...

CVE-2026-12257

creationtimestamp| type| source ---|---|--- 2026-07-13 13:37:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjstg74rk2w 2026-07-13 14:37:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjw5m3qtw2y 2026-07-13 15:12:04+00:00| seen|...

CVE-2026-61970

creationtimestamp| type| source ---|---|--- 2026-07-13 13:18:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjrqelee42x...

Exploit for Improper Input Validation in Apache Camel

camel-cometd Inbound Bayeux Header Injection Reproducer CVE-2...

CVE-2026-57805

creationtimestamp| type| source ---|---|--- 2026-07-13 12:34:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjpbecik52e...

Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.110 fixes various security issues The following security issues were fixed: CVE-2025-71089: iommu: disable SVA when CONFIGX86 is set bsc1256615. CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524...

CVE-2026-57411

creationtimestamp| type| source ---|---|--- 2026-07-13 12:10:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqjnw7ua252u 2026-07-13 12:10:21+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116912594644386383...

CVE-2026-57738

creationtimestamp| type| source ---|---|--- 2026-07-13 11:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjldylgvv2h 2026-07-13 11:24:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjler6l6c2w 2026-07-13 11:28:13+00:00| seen|...

CVE-2026-57734

creationtimestamp| type| source ---|---|--- 2026-07-13 11:21:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjla432an2y...

CVE-2026-57702

creationtimestamp| type| source ---|---|--- 2026-07-13 11:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjkvqdtb32w 2026-07-14 01:45:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql3hzwcvj2w 2026-07-14 01:45:28+00:00| seen|...

CVE-2026-57786

creationtimestamp| type| source ---|---|--- 2026-07-13 11:08:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjkivcoiu2w...

CVE-2026-57391

creationtimestamp| type| source ---|---|--- 2026-07-13 11:07:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjkgobrfr2w 2026-07-16 07:56:30+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr5m3eps2b...

CVE-2026-57380

creationtimestamp| type| source ---|---|--- 2026-07-13 10:51:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjjj2oxcw2a 2026-07-13 18:59:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkesk5dve2i 2026-07-16 07:55:39+00:00| seen|...

CVE-2026-57812

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through = 1.6.12.4...

CVE-2026-57804

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CodexThemes TheGem Theme Elements for Elementor allows PHP Local File Inclusion. This issue affects TheGem Theme Elements for Elementor: from n/a before 5.12.1.1...

CVE-2026-57796

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in VLThemes Leedo leedo allows PHP Local File Inclusion.This issue affects Leedo: from n/a through = 3.0.0...

CVE-2026-57781

Missing Authorization vulnerability in Sovlix MeetingHub meetinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MeetingHub: from n/a through = 1.25.10...

PYSEC-2026-3441

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...