CVE-2025-71003

An input validation vulnerability in the flow.arange component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

Oneflow security vulnerabilities

OneFlow is an open-source deep learning framework developed by OneFlow. Version 0.9.0 of OneFlow contains a security vulnerability, which stems from insufficient input validation in the flow.scatter/flow.scatteradd component. This vulnerability could lead to denial-of-service attacks...

CVE-2025-71009

An input validation vulnerability in the flow.scatter/flow.scatteradd component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted indices...

SecIC3: Customizing IC3 for Hardware Security Verification

Recent years have seen significant advances in using formal verification to check hardware security properties. Of particular practical interest are checking confidentiality and integrity of secrets, by checking that there is no information flow between the secrets and observable outputs. A...

EUVD-2025-206540

An input validation vulnerability in the flow.scatter/flow.scatteradd component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted indices...

PT-2026-5301

Name of the Vulnerable Software and Affected Versions OneFlow version 0.9.0 Description An input validation issue exists in the flow.scatter/flow.scatter add component. This can be exploited to cause a Denial of Service DoS by providing a crafted indices input. Recommendations At the moment, ther...

CVE-2025-71009

An input validation vulnerability in the flow.scatter/flow.scatteradd component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted indices...

CVE-2025-71009

An input validation vulnerability in the flow.scatter/flow.scatteradd component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted indices...

CVE-2025-71009

An input validation vulnerability in the flow.scatter/flow.scatteradd component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted indices...

CVE-2025-71009

OneFlow v0.9.0 is vulnerable to a Denial of Service (DoS) attack due to an input validation flaw in the flow.scatter/flow.scatter_add component. An attacker can cause the application to become unresponsive or crash by submitting out-of-bound indices . There is currently no fixed version or specif...

NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter

Summary An unvalidated redirect open redirect vulnerability exists in NocoDB’s login flow due to missing validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a user-controlled redirect value and conditionally performs client-side navigation without enforcing an...

GHSA-3HMW-8MW3-RMPJ NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter

Summary An unvalidated redirect open redirect vulnerability exists in NocoDB’s login flow due to missing validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a user-controlled redirect value and conditionally performs client-side navigation without enforcing an...

CVE-2026-24768

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect open redirect vulnerability exists in NocoDB’s login flow due to missing validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a user-controlled redirect...

CVE-2026-24768

NocoDB before version 0.301.0 contains an unvalidated redirect in the login flow via the continueAfterSignIn parameter. During authentication, a user-controlled redirect can navigate the user to arbitrary external sites after login, enabling phishing attempts that leverage trust in the legitimate...

CVE-2026-24768 NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect open redirect vulnerability exists in NocoDB’s login flow due to missing validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a user-controlled redirect...

CVE-2026-24768

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect open redirect vulnerability exists in NocoDB’s login flow due to missing validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a user-controlled redirect...

CVE-2026-24768 NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect open redirect vulnerability exists in NocoDB’s login flow due to missing validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a user-controlled redirect...

EUVD-2026-4870

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect open redirect vulnerability exists in NocoDB’s login flow due to missing validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a user-controlled redirect...

CVE-2025-71002

A floating-point exception FPE in the flow.columnstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero via the flow.columnstack component. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that triggers a floating-point exception. Remediation There is no fixed version fo...