PYSEC-2026-951 Overflow in `ImageProjectiveTransformV2`

Impact When tf.rawops.ImageProjectiveTransformV2 is given a large output shape, it overflows. python import tensorflow as tf interpolation = "BILINEAR" fillmode = "REFLECT" images = tf.constant0.184634328, shape=2,5,8,3, dtype=tf.float32 transforms = tf.constant0.378575385, shape=2,8,...

WordPress WP Maps Pro plugin <= 6.0.4 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by David Brown in WordPress Plugin Advanced Google Maps versions = 6.0.4...

IronOS security vulnerabilities

IronOS is a firmware system developed by Ben V. Brown individually. Versions of IronOS prior to v2.23-rc2 contained security vulnerabilities, which were caused by integer overflows or circular errors...

EUVD-2025-117421

Malicious code in efficient-brown-quail npm...

EUVD-2025-117063

Malicious code in steep-brown-pike npm...

EUVD-2025-117059

Malicious code in stiff-brown-tuna npm...

Malicious code in yabbering-brown-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca10e2c101534a9074f3fbbcbaf0f0d248630b68710eaf22ba06990173f1ab9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116983

Malicious code in xenacious-brown-hyena npm...

EUVD-2025-117266

Malicious code in likely-brown-donkey npm...

EUVD-2025-117471

Malicious code in confidential-brown-monkey npm...

EUVD-2025-117491

Malicious code in clean-brown-shark npm...

Malicious code in xenacious-brown-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eb2cdb1283d01c460231b7ae4b4fe44cebb1bb58d596ed8c5d5cb4dc091fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116981

Malicious code in yabbering-brown-woodpecker npm...

Malicious code in brave-brown-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec287c63714917f82e893b8f31fad405c761ca5bd1f8daececd1e65776905e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117396

Malicious code in experimental-brown-bass npm...

EUVD-2025-117036

Malicious code in technological-brown-rabbit npm...

EUVD-2025-117076

Malicious code in special-brown-bobcat npm...

Malicious code in opposite-brown-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d359311dccd9fb3b6036a649cfa736e2911a7cf9775a85cda371f6151087a7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117505

Malicious code in brave-brown-bovid npm...

EUVD-2025-117188

Malicious code in opposite-brown-bobolink npm...