Grimmory 跨站脚本漏洞

Grimmory is an open-source e-book management software developed by Grimmory. Versions of Grimmory prior to 2.3.1 contained a cross-site scripting vulnerability. This vulnerability stemmed from the browser EPUB reader, allowing attackers to embed arbitrary JavaScript in specially crafted EPUB file...

Mlflow 安全漏洞

Mlflow is an open source platform for machine learning lifecycles. A security vulnerability exists in Mlflow versions prior to 2.3.1 that stems from being able to read local files...

CVE-2022-44643

A vulnerability in the label-based access control of Grafana Labs Grafana Enterprise Metrics allows an attacker more access than intended. If an access policy which has label selector restrictions also has been granted access to all tenants in the system, the label selector restrictions will not ...

Thomas Leitner kramdown 安全漏洞

Thomas Leitner kramdown is Thomas Leitner an open source application . Provides a fast pure Ruby Markdown superset converter , using a strict syntax definition and support for several common extensions . Kramdown before 2.3.1 A security vulnerability exists because Kramdown does not restrict the...

Unspecified Vulnerability in Google Tensorflow (CNVD-2020-57075)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Tensorflow versions prior to 2.2.1, 2.3.1, which can be exploited by an attacker to cause memory leakage issues...