CVE-2026-15311

The CVE-2026-15311 entry concerns NousResearch hermes-agent (Matrix Adapter). The vulnerability specifically affects MatrixAdapter._markdown_to_html in gateway/platforms/matrix.py, enabling cross-site scripting. It can be exploited remotely and publicly available exploit code exists. The related ...

Missing validation causes denial of service via `LoadAndRemapMatrix`

ImpactThe implementation of tf.rawops.LoadAndRemapMatrix does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tfckptpath = tf.constant "/tmp/warmstartingutiltest5kl2a3pc/tmpph76tep2/model-0"...

PYSEC-2026-3214 Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`

Impact The implementation of tf.rawops.SparseTensorToCSRSparseMatrix does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf indices = tf.constant53, shape=3, dtype=tf.int64 values =...

Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`

ImpactThe implementation of tf.rawops.SparseTensorToCSRSparseMatrix does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tfindices = tf.constant53, shape=3, dtype=tf.int64values =...

PYSEC-2026-3357 Missing validation causes denial of service via `LoadAndRemapMatrix`

Impact The implementation of tf.rawops.LoadAndRemapMatrix does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf ckptpath = tf.constant...

PYSEC-2026-2620 matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG

An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID...

matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG

An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID...

PT-2026-59273

An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID...

PT-2026-57019

A vulnerability was identified in NousResearch hermes-agent up to 2026.5.29.2. Affected by this issue is the function MatrixAdapter. markdown to html of the file gateway/platforms/matrix.py of the component Matrix Adapter. Such manipulation leads to cross site scripting. The attack can be execute...

Updated vips packages fix security vulnerabilities

This update fixes several security issues: A flaw has been found in libvips up to 8.18.0. The affected element is the function vipsforeignloadmatrixfileisa/vipsforeignloadmatrixheader of the file libvips/foreign/matrixload.c. Executing a manipulation can lead to memory corruption. The attack need...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2025-61672 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2025-61672 Source advisory: OSV:PYSEC-2026-1612...

matrix-synapse-testutils (>=1.65.0.0, <=1.96.1.0) potentially affected by CVE-2025-61672 via matrix-synapse (>=1.65.0, <=1.96.1)

matrix-synapse PYPI version =1.65.0, =1.65.0.0, =1.96.1.0 Source cves: CVE-2025-61672 Source advisory: OSV:PYSEC-2026-1612...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2025-30355 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2025-30355 Source advisory: OSV:PYSEC-2026-1614...

matrix-synapse-testutils (>=1.65.0.0, <=1.96.1.0) potentially affected by CVE-2025-30355 via matrix-synapse (>=1.65.0, <=1.96.1)

matrix-synapse PYPI version =1.65.0, =1.65.0.0, =1.96.1.0 Source cves: CVE-2025-30355 Source advisory: OSV:PYSEC-2026-1614...

allennlp (>=0.8.0, <=0.8.2), lapdog (0.15.4) +15 more potentially affected by CVE-2024-6839 via flask-cors (3.0.7)

flask-cors PYPI version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - allennlp =0.8.0, =0.5.1.dev0, =1.1.4, =3.9.6, =0.2.0, =0.1.0, =0.1.0, =0.1.3, =0.3.8, =0.2.3, =1.0.1, =1.4.0.dev26 and more Source cves:...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2024-52815 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2024-52815 Source advisory: OSV:PYSEC-2026-1611...

matrix-synapse-testutils (>=1.65.0.0, <=1.96.1.0) potentially affected by CVE-2024-53863 via matrix-synapse (>=1.65.0, <=1.96.1)

matrix-synapse PYPI version =1.65.0, =1.65.0.0, =1.96.1.0 Source cves: CVE-2024-53863 Source advisory: OSV:PYSEC-2026-1615...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2024-53863 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2024-53863 Source advisory: OSV:PYSEC-2026-1615...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2024-52805 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2024-52805 Source advisory: OSV:PYSEC-2026-1613...

matrix-synapse-testutils (>=1.65.0.0, <=1.96.1.0) potentially affected by CVE-2024-52805 via matrix-synapse (>=1.65.0, <=1.96.1)

matrix-synapse PYPI version =1.65.0, =1.65.0.0, =1.96.1.0 Source cves: CVE-2024-52805 Source advisory: OSV:PYSEC-2026-1613...