370 matches found
PYSEC-2026-3105 Overflow in `ImageProjectiveTransformV2`
Impact When tf.rawops.ImageProjectiveTransformV2 is given a large output shape, it overflows. python import tensorflow as tf interpolation = "BILINEAR" fillmode = "REFLECT" images = tf.constant0.184634328, shape=2,5,8,3, dtype=tf.float32 transforms = tf.constant0.378575385, shape=2,8,...
PYSEC-2026-951 Overflow in `ImageProjectiveTransformV2`
Impact When tf.rawops.ImageProjectiveTransformV2 is given a large output shape, it overflows. python import tensorflow as tf interpolation = "BILINEAR" fillmode = "REFLECT" images = tf.constant0.184634328, shape=2,5,8,3, dtype=tf.float32 transforms = tf.constant0.378575385, shape=2,8,...
WordPress WP Maps Pro plugin <= 6.0.4 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by David Brown in WordPress Plugin Advanced Google Maps versions = 6.0.4...
IronOS security vulnerabilities
IronOS is a firmware system developed by Ben V. Brown individually. Versions of IronOS prior to v2.23-rc2 contained security vulnerabilities, which were caused by integer overflows or circular errors...
EUVD-2025-117491
Malicious code in clean-brown-shark npm...
EUVD-2025-117076
Malicious code in special-brown-bobcat npm...
EUVD-2025-117059
Malicious code in stiff-brown-tuna npm...
EUVD-2025-116981
Malicious code in yabbering-brown-woodpecker npm...
EUVD-2025-117188
Malicious code in opposite-brown-bobolink npm...
EUVD-2025-117036
Malicious code in technological-brown-rabbit npm...
EUVD-2025-117421
Malicious code in efficient-brown-quail npm...
MAL-2025-138597 Malicious code in brave-brown-bovid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec287c63714917f82e893b8f31fad405c761ca5bd1f8daececd1e65776905e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117471
Malicious code in confidential-brown-monkey npm...
EUVD-2025-117063
Malicious code in steep-brown-pike npm...
Malicious code in xenacious-brown-hyena (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eb2cdb1283d01c460231b7ae4b4fe44cebb1bb58d596ed8c5d5cb4dc091fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in brave-brown-bovid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec287c63714917f82e893b8f31fad405c761ca5bd1f8daececd1e65776905e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116983
Malicious code in xenacious-brown-hyena npm...
Malicious code in opposite-brown-bobolink (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d359311dccd9fb3b6036a649cfa736e2911a7cf9775a85cda371f6151087a7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...