MAL-2026-9013 Malicious code in tryc4bzz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8994 Malicious code in tinytestbkpsfsnykc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8976 Malicious code in testgemfooabc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8956 Malicious code in swpdf1311181 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8946 Malicious code in swmeet01 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8668 Malicious code in slncwszfib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8523 Malicious code in rfetchh (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8449 Malicious code in proxytcf1f8d7b (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8420 Malicious code in pd131119hccc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8008 Malicious code in lf295q5 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7923 Malicious code in lbfajkdltu (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7801 Malicious code in lambfetch003 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7693 Malicious code in g8249bfavd (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7595 Malicious code in chmid8500x532747 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

ydata unsafe deserialization

Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded...

ydata cross-site scripting

A cross-site scripting XSS vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser...

PYSEC-2026-2062 ydata unsafe deserialization

Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded...

TensorFlow vulnerable to `CHECK` failures in `UnbatchGradOp`

ImpactThe UnbatchGradOp function takes an argument id that is assumed to be a scalar. A nonscalar id can trigger a CHECK failure and crash the program.pythonimport numpy as npimport tensorflow as tf id is not scalartf.rawops.UnbatchGradoriginalinput= tf.constant1,batchindex=tf.constant0,0,0 , ,...

SUSE CVE-2026-13959

Insufficient validation of untrusted input in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of the parse_report_descriptor() function in the USB HID protocol analyzer of Wireshark allows a hacker to induce a service failure.

The vulnerability of the parsereportdescriptor function in the USB HID protocol analyzer of Wireshark, a computer network traffic analyzer, is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause a service failure...