Lexbor 安全漏洞

Lexbor is an open-source C language library developed by Lexbor for processing HTML and CSS. Versions of Lexbor prior to 2.7.0 contained security vulnerabilities. These vulnerabilities stemmed from type confusion in the HTML fragment parser, which could lead to pointer dereferencing...

PT-2026-2792

Name of the Vulnerable Software and Affected Versions Enclave versions prior to 2.7.0 Description Enclave is a secure JavaScript sandbox used for safe AI agent code execution. A critical sandbox escape issue exists in enclave-vm, allowing untrusted JavaScript code to execute arbitrary code in the...

CVE-2025-12613

Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing...

PYSEC-2025-200

In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results...

Intel FPGA products 安全漏洞

Intel FPGA products is a family of software applications from Intel Corporation. A security vulnerability exists in Intel FPGA products versions prior to 2.7.0, which stems from the presence of incorrect input validation. An attacker could exploit the vulnerability to escalate privileges...

Google TensorFlow 安全漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. A security vulnerability exists in Google TensorFlow versions prior to 2.7.0, which stems from a lack of validation of the shape of the tensor parameter involved in a call...

DEBIAN-CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

CVE-2019-15319

The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce...

CVE-2017-3162

HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0...