GHSA-WX3W-R2PW-7WXR vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-8GMG-RGVJ-XVJJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MCCM-G2CW-25J9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-Q3QQ-QQRH-7WXQ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-R3X8-667C-JHVP vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W63P-JR39-2686 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-X6W2-JPMX-X267 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4VC8-XH76-X4R3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-52GF-2X69-M2W4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5RQG-9MJF-C7J6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6P29-H75Q-5332 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6PR3-GRCV-9X6M vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-68Q2-F79G-5V77 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J39G-274J-3WPM vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JM5G-9RWJ-6FH6 vulnerabilities

Vulnerabilities for packages: chromium...

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. "Operators rely on automated scraping tooling with custom or legitimate-sounding user agents, leveraging...

Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow

ImpactThe implementation of tf.histogramfixedwidth is vulnerable to a crash when the values array contain NaN elements:pythonimport tensorflow as tfimport numpy as nptf.histogramfixedwidthvalues=np.nan, valuerange=1,2The implementation assumes that all floating point operations are defined and th...

Type confusion leading to `CHECK`-failure based denial of service in TensorFlow

ImpactThe macros that TensorFlow uses for writing assertions e.g., CHECKLT, CHECKGT, etc. have an incorrect logic when comparing sizet and int values. Due to type conversion rules, several of the macros would trigger incorrectly. PatchesWe have patched the issue in GitHub commit...

Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow

ImpactThe implementation of tf.histogramfixedwidth is vulnerable to a crash when the values array contain NaN elements:pythonimport tensorflow as tfimport numpy as nptf.histogramfixedwidthvalues=np.nan, valuerange=1,2The implementation assumes that all floating point operations are defined and th...

PYSEC-2026-3267 Missing validation causes denial of service via `LSTMBlockCell`

Impact The implementation of tf.rawops.LSTMBlockCell does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf tf.rawops.LSTMBlockCell x=tf.constant0.837607, shape=28,29, dtype=tf.float32,...