Ray Dashboard Logs API Path Traversal

Ray Dashboard versions 2.56.0 and earlier are vulnerable to path traversal through the /api/v0/logs endpoint, allowing unauthenticated attackers to enumerate and read filesystem paths via attacker-controlled glob paths. Module Options msf use auxiliary/gather/ray/dashboardlogsapipathtraversal msf...

PYSEC-2020-141

In TensorFlow release candidate versions 2.4.0rc, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories. There are multiple invariants and preconditions that are assumed by the parallel...

CVE-2020-26269

In TensorFlow release candidate versions 2.4.0rc, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories. There are multiple invariants and preconditions that are assumed by the parallel...