31897 matches found
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. "Operators rely on automated scraping tooling with custom or legitimate-sounding user agents, leveraging...
PYSEC-2026-3267 Missing validation causes denial of service via `LSTMBlockCell`
Impact The implementation of tf.rawops.LSTMBlockCell does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf tf.rawops.LSTMBlockCell x=tf.constant0.837607, shape=28,29, dtype=tf.float32,...
PYSEC-2026-3138 Memory leak in Tensorflow
Impact If a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize: cc Status s = params.createkerneln-properties, &item-kernel; if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a simp...
MAL-2026-10090 Malicious code in nonenull1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162cd9e0496d35e0500fe084f6011a3e6893182b0fa209502c5d6017ab1138ac The package declares gypfile: true with no native C/C++ sources, and its binding.gyp abuses GYP command-expansion syntax in the sources list — !node...
GHSA-52VM-MXX8-F227
creationtimestamp| type| source ---|---|--- 2026-07-09 16:11:48+00:00| seen| https://gist.github.com/alon710/de8daa287a86509961bb72f2223b1bc8...
CVE-2026-48987
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:17+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-c2f9-4mc8-j656...
CVE-2026-50554
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:10+00:00| published-proof-of-concept| https://github.com/enchant97/note-mark/security/advisories/GHSA-588f-fvcv-xhvf...
CVE-2026-53727
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:05+00:00| published-proof-of-concept| https://github.com/premailer/cssparser/security/advisories/GHSA-9pmc-p236-855h 2026-07-18 00:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquydfuuou2q...
GHSA-GV7V-RGG6-548H
creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:12+00:00| seen| https://t.me/brutsecurity/1117 2026-07-10 00:00:35+00:00| seen| https://t.me/brutsecurity/1117 2026-07-11 16:00:02+00:00| published-proof-of-concept| https://t.me/brutsecurity/1117 2026-07-12 00:00:45+00:00|...
GHSA-2P59-XC6P-6W7C vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-qemu, linux-gcp...
GHSA-36GR-GW56-G35V vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-qemu, linux-gcp...
GHSA-5F39-WJPQ-XRRJ vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-qemu, linux-gcp...
GHSA-5RWX-CQG3-893X vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-qemu, linux-gcp...
GHSA-W8W6-F4MM-HW75 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-qemu, linux-gcp, linux-aws...
GHSA-QC6F-VG59-3945 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu-melange, linux-vmware, linux-qemu, linux-gcp...
PT-2026-57006
Name of the Vulnerable Software and Affected Versions GitHub CLI gh versions 2.10.0 through 2.95.0 Description Connecting to a malicious Codespace using the gh codespace jupyter command can lead to command execution. This occurs because the tool opens a JupyterLab URL provided by a process within...
CVE-2026-53600
creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:10+00:00| published-proof-of-concept| https://github.com/dignifiedquire/async-tar/security/advisories/GHSA-35rm-7j9c-2f7m...
CVE-2026-49455
creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:05+00:00| published-proof-of-concept| https://github.com/wakujs/waku/security/advisories/GHSA-75w3-gmqx-993q...