CVE-2022-35966

TensorFlow is an open source platform for machine learning. If QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-35938

TensorFlow is an open source platform for machine learning. The GatherNd function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. This issue has been...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the deployments configured with ACME and SCEP provisioners. An attacker can gain unauthorized access to sensitive resources by bypassing authorization controls. Remediation Upgrade...

Exposed Dangerous Method or Function

Overview Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via the sse or streaming transport modes. An attacker can gain unauthorized access to internal resources by tricking a victim into visiting a malicious website or serving a malicious advertisement...

Security Bulletin: NVIDIA Isaac-GR00T - November 2025

NVIDIA has released a software update for NVIDIA Isaac-GR00T. To protect your system, install software from GitHub commit 7f53666 of NVIDIA Isaac-GR00T. Go to NVIDIA Product Security...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the openEditor function when the EDITOR environment variable and configuration file path that are passed unsanitized to a shell command. An attacker can execute arbitrary system commands by manipulating the EDITOR...

Arbitrary Code Injection

Overview org.webjars.npm:happy-dom is a Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. It includes many web standards from WHATWG DOM and HTML. Affected versions of this package are vulnerable to Arbitrary Code Injection due to default evaluation o...

EUVD-2021-0399

Malware in sbrugna...

EUVD-2021-0416

Malware in sbrugna...

EUVD-2021-0384

Malware in sbrugna...

EUVD-2021-0410

Malware in sbrugna...

EUVD-2022-6810

Malicious code in bioql PyPI...

EUVD-2022-7448

Malicious code in bioql PyPI...

EUVD-2022-7469

Malicious code in bioql PyPI...

EUVD-2022-6964

Malicious code in bioql PyPI...

EUVD-2022-6949

Malicious code in bioql PyPI...

EUVD-2022-7333

Malicious code in bioql PyPI...

EUVD-2022-6807

Malicious code in bioql PyPI...

EUVD-2022-6976

Malicious code in bioql PyPI...

EUVD-2022-7388

Malicious code in bioql PyPI...