30605 matches found
PYSEC-2026-3267 Missing validation causes denial of service via `LSTMBlockCell`
Impact The implementation of tf.rawops.LSTMBlockCell does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf tf.rawops.LSTMBlockCell x=tf.constant0.837607, shape=28,29, dtype=tf.float32,...
PYSEC-2026-3138 Memory leak in Tensorflow
Impact If a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize: cc Status s = params.createkerneln-properties, &item-kernel; if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a simp...
MAL-2026-10090 Malicious code in nonenull1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162cd9e0496d35e0500fe084f6011a3e6893182b0fa209502c5d6017ab1138ac The package declares gypfile: true with no native C/C++ sources, and its binding.gyp abuses GYP command-expansion syntax in the sources list — !node...
GHSA-52VM-MXX8-F227
creationtimestamp| type| source ---|---|--- 2026-07-09 16:11:48+00:00| seen| https://gist.github.com/alon710/de8daa287a86509961bb72f2223b1bc8...
CVE-2026-48987
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:17+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-c2f9-4mc8-j656...
CVE-2026-50554
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:10+00:00| published-proof-of-concept| https://github.com/enchant97/note-mark/security/advisories/GHSA-588f-fvcv-xhvf...
CVE-2026-53727
creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:05+00:00| published-proof-of-concept| https://github.com/premailer/cssparser/security/advisories/GHSA-9pmc-p236-855h 2026-07-18 00:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquydfuuou2q...
GHSA-GV7V-RGG6-548H
creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:12+00:00| seen| https://t.me/brutsecurity/1117 2026-07-10 00:00:35+00:00| seen| https://t.me/brutsecurity/1117 2026-07-11 16:00:02+00:00| published-proof-of-concept| https://t.me/brutsecurity/1117 2026-07-12 00:00:45+00:00|...
GHSA-5F39-WJPQ-XRRJ vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-vmware, linux-qemu...
GHSA-2P59-XC6P-6W7C vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-vmware, linux-qemu...
GHSA-36GR-GW56-G35V vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-vmware, linux-qemu...
GHSA-W8W6-F4MM-HW75 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-aws, linux-gcp, linux-vmware, linux-qemu...
GHSA-5RWX-CQG3-893X vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-vmware, linux-qemu...
GHSA-QC6F-VG59-3945 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-gcp, linux-vmware, linux-qemu...
PT-2026-57006
Name of the Vulnerable Software and Affected Versions GitHub CLI gh versions 2.10.0 through 2.95.0 Description Connecting to a malicious Codespace using the gh codespace jupyter command can lead to command execution. This occurs because the tool opens a JupyterLab URL provided by a process within...
CVE-2026-53600
creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:10+00:00| published-proof-of-concept| https://github.com/dignifiedquire/async-tar/security/advisories/GHSA-35rm-7j9c-2f7m...
CVE-2026-49455
creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:05+00:00| published-proof-of-concept| https://github.com/wakujs/waku/security/advisories/GHSA-75w3-gmqx-993q...
GHSA-VMWX-M75V-QVCH
creationtimestamp| type| source ---|---|--- 2026-07-08 22:12:23+00:00| seen| https://gist.github.com/alon710/f5073530cad3dd719e641dcee2ba88b8...
