GHSA-MCCM-G2CW-25J9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JWV3-663X-VRW4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J5CG-H7G5-MX9V vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WPVV-PVJ4-745G vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GM8P-G47W-PWGF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-CWC7-H32G-JV39 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-8GMG-RGVJ-XVJJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-8F8Q-PX67-7J76 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5RQG-9MJF-C7J6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6PR3-GRCV-9X6M vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6P29-H75Q-5332 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-68Q2-F79G-5V77 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-52GF-2X69-M2W4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4VC8-XH76-X4R3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J39G-274J-3WPM vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JM5G-9RWJ-6FH6 vulnerabilities

Vulnerabilities for packages: chromium...

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. "Operators rely on automated scraping tooling with custom or legitimate-sounding user agents, leveraging...

PYSEC-2026-3267 Missing validation causes denial of service via `LSTMBlockCell`

Impact The implementation of tf.rawops.LSTMBlockCell does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf tf.rawops.LSTMBlockCell x=tf.constant0.837607, shape=28,29, dtype=tf.float32,...

PYSEC-2026-3138 Memory leak in Tensorflow

Impact If a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize: cc Status s = params.createkerneln-properties, &item-kernel; if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a simp...

MAL-2026-10090 Malicious code in nonenull1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162cd9e0496d35e0500fe084f6011a3e6893182b0fa209502c5d6017ab1138ac The package declares gypfile: true with no native C/C++ sources, and its binding.gyp abuses GYP command-expansion syntax in the sources list — !node...