PT-2026-5178

Name of the Vulnerable Software and Affected Versions OneFlow version 0.9.0 Description A segmentation violation exists in the flow.column stack component of the software. This issue can be exploited by attackers to cause a Denial of Service DoS by providing a crafted input. Recommendations Updat...

CVE-2025-71002

A floating-point exception FPE in the flow.columnstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-71002

OneFlow version 0.9.0 is vulnerable to a Denial of Service (DoS) attack due to a floating-point exception (FPE) , specifically a division by zero , within the flow.column_stack component. An attacker can trigger this by providing specially crafted input , which causes the application to terminate...

CVE-2025-71002

A floating-point exception FPE in the flow.columnstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-5196

Name of the Vulnerable Software and Affected Versions OneFlow version 0.9.0 Description A crafted input can trigger a floating-point exception FPE within the flow.column stack component, leading to a Denial of Service DoS. Recommendations Update to a newer version that contains a fix for this...

PT-2026-5220

Name of the Vulnerable Software and Affected Versions NocoDB versions prior to 0.301.0 Description An unvalidated redirect, specifically an open redirect, exists in NocoDB’s login flow due to insufficient validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a...

CVE-2025-65889

A type validation flaw in the flow.dstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-5140

A dimension validation flaw in the flow.empty component of OneFlow 0.9.0 allows attackers to cause a Denial of Service DoS via a negative or excessively large dimension value...

CVE-2025-65888

A dimension validation flaw in the flow.empty component of OneFlow 0.9.0 allows attackers to cause a Denial of Service DoS via a negative or excessively large dimension value...

Oneflow security vulnerabilities

OneFlow is an open-source deep learning framework developed by OneFlow. Version 0.9.0 of OneFlow contains a security vulnerability. This vulnerability stems from a dimension validation flaw in the flow.empty component, which may allow denial-of-service attacks through negative values or excessive...

EUVD-2025-206475

A type validation flaw in the flow.dstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-5146

A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS by calling flow.cuda.synchronize with an invalid or out-of-range GPU device index...

CVE-2025-65887

A division-by-zero vulnerability in the flow.floordivide component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input tensor with zero...

CVE-2025-65887

OneFlow v0.9.0 is vulnerable to a division-by-zero error in the flow.floor_divide() component. An attacker can exploit this by providing a crafted input tensor containing a zero value , which can lead to a Denial of Service (DoS) by causing the application to crash or become unresponsive. The flo...

CVE-2026-24768: URL Redirection to Untrusted Site

NocoDB is software for building databases as spreadsheets. Prior to version 0.301.0, an unvalidated redirect open redirect vulnerability exists in NocoDB’s login flow due to missing validation of the continueAfterSignIn parameter. During authentication, NocoDB processes a user-controlled redirect...

CVE-2025-65889

The open-source deep learning framework OneFlow v0.9.0 is vulnerable to a type validation flaw (also described as a Type Confusion ) within the flow.dstack component. This flaw allows an attacker to trigger a Denial of Service (DoS) condition, causing the application to crash or become unresponsi...

CVE-2025-71003

An input validation vulnerability in the flow.arange component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-65889

A type validation flaw in the flow.dstack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...

Sensitive Information Disclosure

@anthropic-ai/claude-code is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper trust validation during the project-load flow, which allows an attacker to supply a malicious repository configuration that redirects API requests to an attacker-controlled endpoint a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005056)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005056 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to...