AIX360

AI Explainability 360 v0.3.0 ✨ 새로운 소식: IBM Research가 LLM , 특히 LLM에 주어진 입력 측면에서 설명 가능성을 확장하는 새로운 In-Context Explainability 360 ICX360 툴킷을 보유하고 있습니다. 확인해 보세요! 🚀✨ AI Explainability 360 툴킷은 데이터셋과 머신러닝 모델의 해석 가능성interpretability과 설명 가능성explainability을 지원하는 오픈소스 라이브러리입니다. AI Explainability 360 Python...

AIF360

AI Fairness 360 AIF360 AI Fairness 360 툴킷은 연구 커뮤니티에서 개발한 기술을 포함하는 확장 가능한 오픈소스 라이브러리로, AI 애플리케이션 수명주기 전반에 걸쳐 머신러닝 모델의 편향을 감지하고 완화하는 데 도움을 줍니다. AI Fairness 360 패키지는 Python과 R 모두에서 사용할 수 있습니다. AI Fairness 360 패키지는 다음을 포함합니다. 1. 데이터셋과 모델의 편향을 테스트하기 위한 포괄적인 지표 세트, 2. 이러한 지표에 대한 설명, 그리고 3. 데이터셋과 모델의 편향...

UBUNTU-CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

CVE-2026-84309

pypdf is a free and open-source pure-python PDF library. Prior to 6.16...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to improper timeout management during network read operations in the receive loop. An attacker can cause the application to become unresponsive or crash by sending specially crafted network packets. Details...

PYSEC-2026-2815 Out-of-bounds Write in OpenCV

OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python and OpenCV-Contrib-Python 3.3.0.9 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread...

PYSEC-2026-2060 ydata cross-site scripting

A cross-site scripting XSS vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser...

CVE-2026-57437

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathContext did not keep its source document alive for garbage collection. If an XPathContext outlived its document and the document was collected, evaluating an XPath expression...

UBUNTU-CVE-2026-49346

libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-bit bit depth causes a signed integer overflow in de265imagegetbuffer libde265/image.cc:128. The overflow wraps the plane allocation size to a sma...

EUVD-2026-32912

pypdf: Manipulated XMP metadata streams can exhaust RAM...

JLSEC-2026-569

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability...

CLSA-2026-1779368985 opensc: Fix of CVE-2023-40660

CVE-2023-40660: fix potential PIN bypass when card tracks its own login state...

PT-2026-35059

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.17 Description An integer overflow occurs in the media stream buffer size calculation when processing Session Description Protocol SDP with asymmetric ptime configuration. This overflow can lead to an undersized buffe...

PJSIP 输入验证错误漏洞

PJSIP is an open-source, free and open-source multimedia communication library developed in C language. It implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Versions of PJSIP 2.16 and earlier contained a vulnerability related to input validation errors. This...

PJSIP 安全漏洞

PJSIP is an open-source, free and open-source multimedia communication library developed in C language. It implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Versions of PJSIP 2.16 and earlier contained security vulnerabilities, which stemmed from insufficient buffer...

EUVD-2026-17494

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap out-of-bounds read vulnerability exists in PJSIP's VP9 RTP unpacketizer that occurs when parsing crafted VP9 Scalability Structure SS data. Insufficient bounds checking on the payload...

iccDEV 缓冲区错误漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.6 contained a buffer error vulnerability, which was caused by a heap buffer overflow in the icAnsiToUtf8 function during XML conversion...

iccDEV 代码问题漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.6 contained code-related vulnerabilities. These vulnerabilities stemmed from specially crafted ICC configuration files that could trigger calls to null...

iccDEV 安全漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.6 contained security vulnerabilities. These vulnerabilities stemmed from the handling of specially crafted ICC configuration files, where invalid enumeratio...

iccDEV 安全漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.6 contained security vulnerabilities; these vulnerabilities were caused by heap buffer overflows when processing specially crafted ICC configuration files,...