35860 matches found
GHSA-Q3QQ-QQRH-7WXQ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-R3X8-667C-JHVP vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-W63P-JR39-2686 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X6W2-JPMX-X267 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-4VC8-XH76-X4R3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-68Q2-F79G-5V77 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6P29-H75Q-5332 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6PR3-GRCV-9X6M vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-52GF-2X69-M2W4 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-5RQG-9MJF-C7J6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-J39G-274J-3WPM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JM5G-9RWJ-6FH6 vulnerabilities
Vulnerabilities for packages: chromium...
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. "Operators rely on automated scraping tooling with custom or legitimate-sounding user agents, leveraging...
Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
ImpactThe implementation of tf.histogramfixedwidth is vulnerable to a crash when the values array contain NaN elements:pythonimport tensorflow as tfimport numpy as nptf.histogramfixedwidthvalues=np.nan, valuerange=1,2The implementation assumes that all floating point operations are defined and th...
Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
ImpactThe implementation of tf.histogramfixedwidth is vulnerable to a crash when the values array contain NaN elements:pythonimport tensorflow as tfimport numpy as nptf.histogramfixedwidthvalues=np.nan, valuerange=1,2The implementation assumes that all floating point operations are defined and th...
Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
ImpactThe macros that TensorFlow uses for writing assertions e.g., CHECKLT, CHECKGT, etc. have an incorrect logic when comparing sizet and int values. Due to type conversion rules, several of the macros would trigger incorrectly. PatchesWe have patched the issue in GitHub commit...
PYSEC-2026-3267 Missing validation causes denial of service via `LSTMBlockCell`
Impact The implementation of tf.rawops.LSTMBlockCell does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf tf.rawops.LSTMBlockCell x=tf.constant0.837607, shape=28,29, dtype=tf.float32,...
PYSEC-2026-3138 Memory leak in Tensorflow
Impact If a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize: cc Status s = params.createkerneln-properties, &item-kernel; if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a simp...
MAL-2026-10090 Malicious code in nonenull1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162cd9e0496d35e0500fe084f6011a3e6893182b0fa209502c5d6017ab1138ac The package declares gypfile: true with no native C/C++ sources, and its binding.gyp abuses GYP command-expansion syntax in the sources list — !node...
