CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: text-generation-inference, lmcache-cuda-12.8, label-studio, superset, tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2026.1-fips, tritonserver-backend-vllm-cuda-13.0, open-webui, superset-fips, mlflow, openstack-horizon-2025.2,...

CVE-2026-55380 vulnerabilities

Vulnerabilities for packages: text-generation-inference, lmcache-cuda-12.8, label-studio, superset, tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2026.1-fips, tritonserver-backend-vllm-cuda-13.0, open-webui, superset-fips, mlflow, openstack-horizon-2025.2,...

CVE-2026-54060 vulnerabilities

Vulnerabilities for packages: text-generation-inference, lmcache-cuda-12.8, label-studio, superset, tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2026.1-fips, tritonserver-backend-vllm-cuda-13.0, open-webui, superset-fips, mlflow, openstack-horizon-2025.2,...

CVE-2026-54059 vulnerabilities

Vulnerabilities for packages: text-generation-inference, lmcache-cuda-12.8, label-studio, superset, tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2026.1-fips, tritonserver-backend-vllm-cuda-13.0, open-webui, superset-fips, mlflow, openstack-horizon-2025.2,...

CLEANSTART-2026-CR75797 Security fixes for CVE-2026-25645, CVE-2026-39822, CVE-2026-42505, CVE-2026-59884, CVE-2026-59885, CVE-2026-59886 applied in versions: 2.20.0-r0, 2.20.0-r1

Multiple security vulnerabilities affect the tensorflow-gpu-jupyter package. These issues are resolved in later releases. See references for individual vulnerability details...

genet (>=0.11.0, <=0.17.2), mup-tf (0.0.3) +4 more potentially affected by CVE-2026-12484 via keras (2.11.0rc3)

keras PYPI version 2.11.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - genet =0.11.0, =2.10.0rc1, =2.10.0rc1, =2.10.0rc1, =2.11.0rc0 - tensorflow-text 2.9.0rc1 Source cves: CVE-2026-12484 Source advisory:...

axcorsrmri (0.0.1), behavython (>=0.7.0, <=0.9.8) +8 more potentially affected by CVE-2026-12484 via keras (2.12.0rc1)

keras PYPI version 2.12.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - axcorsrmri 0.0.1 - behavython =0.7.0, =0.3.21, =0.1.5, =0.29.0, =2.11.0rc1, =2.11.0rc1, =2.11.0rc1, =2.11.0rc2 - tensorflow-text 2.10.0rc0 Source...

tensorflow (2.6.0rc0) potentially affected by CVE-2026-12484 via keras (2.6.0rc0)

keras PYPI version 2.6.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - tensorflow 2.6.0rc0 Source cves: CVE-2026-12484 Source advisory: OSV:GHSA-V2W2-W228-C444...

hydra-rbp (>=0.1.21.29, <=0.1.21.38), phasespace (>=1.5.0, <=1.6.0) +4 more potentially affected by CVE-2026-12484 via keras (2.7.0rc2)

keras PYPI version 2.7.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - hydra-rbp =0.1.21.29, =1.5.0, =2.6.0rc1, =0.18.0.dev20210402154254, =0.3.0, =0.3.2 Source cves: CVE-2026-12484 Source advisory:...

OESA-2026-3082 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

genet (>=0.11.0, <=0.17.2), mup-tf (0.0.3) +4 more potentially affected by CVE-2026-12482 via keras (2.11.0rc3)

keras PYPI version 2.11.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - genet =0.11.0, =2.10.0rc1, =2.10.0rc1, =2.10.0rc1, =2.11.0rc0 - tensorflow-text 2.9.0rc1 Source cves: CVE-2026-12482 Source advisory:...

tensorflow (2.6.0rc0) potentially affected by CVE-2026-12482 via keras (2.6.0rc0)

keras PYPI version 2.6.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - tensorflow 2.6.0rc0 Source cves: CVE-2026-12482 Source advisory: OSV:GHSA-58HV-7753-XMFQ...

cryoet-deepfinder (0.2.1), cspot (>=1.0.4, <=1.0.16) +9 more potentially affected by CVE-2026-12482 via keras (2.14.0rc0)

keras PYPI version 2.14.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cryoet-deepfinder 0.2.1 - cspot =1.0.4, =2.1.0, =0.4.0, =2.13.0rc0, =2.13.0rc0, =2.13.0rc2 - tensorflow-text 2.12.0rc0 - tfrec-literate 2.10.0rc1...

hydra-rbp (>=0.1.21.29, <=0.1.21.38), phasespace (>=1.5.0, <=1.6.0) +4 more potentially affected by CVE-2026-12482 via keras (2.7.0rc2)

keras PYPI version 2.7.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - hydra-rbp =0.1.21.29, =1.5.0, =2.6.0rc1, =0.18.0.dev20210402154254, =0.3.0, =0.3.2 Source cves: CVE-2026-12482 Source advisory:...

axcorsrmri (0.0.1), behavython (>=0.7.0, <=0.9.8) +8 more potentially affected by CVE-2026-1462 via keras (2.12.0rc1)

keras PYPI version 2.12.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - axcorsrmri 0.0.1 - behavython =0.7.0, =0.3.21, =0.1.5, =0.29.0, =2.11.0rc1, =2.11.0rc1, =2.11.0rc1, =2.11.0rc2 - tensorflow-text 2.10.0rc0 Source...

genet (>=0.11.0, <=0.17.2), mup-tf (0.0.3) +4 more potentially affected by CVE-2026-1462 via keras (2.11.0rc3)

keras PYPI version 2.11.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - genet =0.11.0, =2.10.0rc1, =2.10.0rc1, =2.10.0rc1, =2.11.0rc0 - tensorflow-text 2.9.0rc1 Source cves: CVE-2026-1462 Source advisory:...

tensorflow (2.6.0rc0) potentially affected by CVE-2026-1462 via keras (2.6.0rc0)

keras PYPI version 2.6.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - tensorflow 2.6.0rc0 Source cves: CVE-2026-1462 Source advisory: OSV:PYSEC-2026-2547...

hydra-rbp (>=0.1.21.29, <=0.1.21.38), phasespace (>=1.5.0, <=1.6.0) +4 more potentially affected by CVE-2026-1462 via keras (2.7.0rc2)

keras PYPI version 2.7.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - hydra-rbp =0.1.21.29, =1.5.0, =2.6.0rc1, =0.18.0.dev20210402154254, =0.3.0, =0.3.2 Source cves: CVE-2026-1462 Source advisory: OSV:PYSEC-2026-2547...

PYSEC-2026-3190 TensorFlow has segfault in array_ops.upper_bound

Impact arrayops.upperbound causes a segfault when not given a rank 2 tensor. Patches We have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586. The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more information...

PYSEC-2026-3331 TensorFlow has segfault in array_ops.upper_bound

Impact arrayops.upperbound causes a segfault when not given a rank 2 tensor. Patches We have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586. The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more information...