GHSA-8F8Q-PX67-7J76 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WPVV-PVJ4-745G vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F5W7-VPJF-RMJJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F4WC-QC7X-8G92 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5RQG-9MJF-C7J6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6PR3-GRCV-9X6M vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-68Q2-F79G-5V77 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6P29-H75Q-5332 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-52GF-2X69-M2W4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4VC8-XH76-X4R3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J39G-274J-3WPM vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JM5G-9RWJ-6FH6 vulnerabilities

Vulnerabilities for packages: chromium...

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. "Operators rely on automated scraping tooling with custom or legitimate-sounding user agents, leveraging...

PYSEC-2026-3267 Missing validation causes denial of service via `LSTMBlockCell`

Impact The implementation of tf.rawops.LSTMBlockCell does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf tf.rawops.LSTMBlockCell x=tf.constant0.837607, shape=28,29, dtype=tf.float32,...

PYSEC-2026-3138 Memory leak in Tensorflow

Impact If a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize: cc Status s = params.createkerneln-properties, &item-kernel; if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a simp...

MAL-2026-10090 Malicious code in nonenull1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162cd9e0496d35e0500fe084f6011a3e6893182b0fa209502c5d6017ab1138ac The package declares gypfile: true with no native C/C++ sources, and its binding.gyp abuses GYP command-expansion syntax in the sources list — !node...

GHSA-52VM-MXX8-F227

creationtimestamp| type| source ---|---|--- 2026-07-09 16:11:48+00:00| seen| https://gist.github.com/alon710/de8daa287a86509961bb72f2223b1bc8...

CVE-2026-48987

creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:17+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-c2f9-4mc8-j656...

CVE-2026-50554

creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:10+00:00| published-proof-of-concept| https://github.com/enchant97/note-mark/security/advisories/GHSA-588f-fvcv-xhvf...

CVE-2026-53727

creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:05+00:00| published-proof-of-concept| https://github.com/premailer/cssparser/security/advisories/GHSA-9pmc-p236-855h 2026-07-18 00:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquydfuuou2q...