GHSA-MC52-82M8-RRW6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WPVV-PVJ4-745G vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WX3W-R2PW-7WXR vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RGW6-446J-4GH8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-V68W-64JW-RFJJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-VR3H-9WM8-MCR4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6P29-H75Q-5332 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6PR3-GRCV-9X6M vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-68Q2-F79G-5V77 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-52GF-2X69-M2W4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4VC8-XH76-X4R3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5RQG-9MJF-C7J6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JM5G-9RWJ-6FH6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J39G-274J-3WPM vulnerabilities

Vulnerabilities for packages: chromium...

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. "Operators rely on automated scraping tooling with custom or legitimate-sounding user agents, leveraging...

Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow

ImpactThe implementation of tf.histogramfixedwidth is vulnerable to a crash when the values array contain NaN elements:pythonimport tensorflow as tfimport numpy as nptf.histogramfixedwidthvalues=np.nan, valuerange=1,2The implementation assumes that all floating point operations are defined and th...

Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow

ImpactThe implementation of tf.histogramfixedwidth is vulnerable to a crash when the values array contain NaN elements:pythonimport tensorflow as tfimport numpy as nptf.histogramfixedwidthvalues=np.nan, valuerange=1,2The implementation assumes that all floating point operations are defined and th...

Type confusion leading to `CHECK`-failure based denial of service in TensorFlow

ImpactThe macros that TensorFlow uses for writing assertions e.g., CHECKLT, CHECKGT, etc. have an incorrect logic when comparing sizet and int values. Due to type conversion rules, several of the macros would trigger incorrectly. PatchesWe have patched the issue in GitHub commit...

PYSEC-2026-3267 Missing validation causes denial of service via `LSTMBlockCell`

Impact The implementation of tf.rawops.LSTMBlockCell does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf tf.rawops.LSTMBlockCell x=tf.constant0.837607, shape=28,29, dtype=tf.float32,...

PYSEC-2026-3138 Memory leak in Tensorflow

Impact If a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize: cc Status s = params.createkerneln-properties, &item-kernel; if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a simp...