262269 matches found
PYSEC-2026-3013 pypdf has a possible infinite loop when processing TreeObject
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the children of a TreeObject, for example as part of outlines. Patches This has been fixed in pypdf==6.7.1. Workarounds If you cannot upgrade yet, consider applying the changes...
PYSEC-2026-2571 Langflow Missing Authentication on Critical API Endpoints
Summary Multiple critical API endpoints in Langflow are missing authentication controls, allowing any unauthenticated user to access sensitive user conversation data, transaction histories, and perform destructive operations including message deletion. This affects endpoints handling personal dat...
PYSEC-2026-2414 OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access
An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to...
CVE-2026-15559
creationtimestamp| type| source ---|---|--- 2026-07-13 14:32:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjvvfcbd52l 2026-07-13 15:58:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk2o4m5dg2w 2026-07-13 18:15:31+00:00| seen|...
CVE-2026-15558
creationtimestamp| type| source ---|---|--- 2026-07-13 14:22:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjvdic6pm26 2026-07-13 15:41:47+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqjzqt552l2o 2026-07-14 02:40:01+00:00| seen|...
PYSEC-2026-2535 JupyterLab vulnerable to SXSS in Markdown Preview
Impact The vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user...
PYSEC-2026-3286 TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
Impact Out of bounds read in GRUBlockCellGrad python func = tf.rawops.GRUBlockCellGrad para = 'x': 21.1, 156.2, 83.3, 115.4, 'hprev': array136.5, 136.6, 'wru': array26.7, 0.8, 47.9, 26.1, 26.2, 26.3, 'wc': array 0.4, 31.5, 0.6, 'bru': array0.1, 0.2 , dtype=float32, 'bc': 0x41414141, 'r': array0.3...
PYSEC-2026-3284 `CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
Impact If tf.rawops.TensorListResize is given a nonscalar value for input size, it results CHECK fail which can be used to trigger a denial of service attack. python import numpy as np import tensorflow as tf a = datastructures.tftensorlistnewelements = tf.constantvalue=3, 4, 5 b = np.zeros0, 2, ...
PYSEC-2026-3262 Segfault via invalid attributes in `pywrap_tfe_src.cc`
Impact If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a nullptr, which is not caught. An example can be seen in tf.compat.v1.extractvolumepatches by passing in quantized tensors as input ksizes. python import numpy as np import...
PYSEC-2026-3124 FPE in `tf.image.generate_bounding_box_proposals`
Impact When running on GPU, tf.image.generateboundingboxproposals receives a scores input that must be of rank 4 but is not checked. python import tensorflow as tf a = tf.constantvalue=1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0 b = tf.constantvalue=1...
PYSEC-2026-3105 Overflow in `ImageProjectiveTransformV2`
Impact When tf.rawops.ImageProjectiveTransformV2 is given a large output shape, it overflows. python import tensorflow as tf interpolation = "BILINEAR" fillmode = "REFLECT" images = tf.constant0.184634328, shape=2,5,8,3, dtype=tf.float32 transforms = tf.constant0.378575385, shape=2,8,...
PYSEC-2026-3345 Seg fault in `ndarray_tensor_bridge` due to zero and large inputs
Impact If a numpy array is created with a shape such that one element is zero and the others sum to a large number, an error will be raised. E.g. the following raises an error: python np.ones0, 231, 231 An example of a proof of concept: python import numpy as np import tensorflow as tf inputval =...
PYSEC-2026-3213 TensorFlow vulnerable to `CHECK` fail in `Save` and `SaveSlices`
Impact If Save or SaveSlices is run over tensors of an unsupported dtype, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf filename = tf.constant"" tensornames = tf.constant"" Save data = tf.casttf.random.uniformshape=1,...
PYSEC-2026-3303 TensorFlow vulnerable to `CHECK` fail in `LRNGrad`
Impact If LRNGrad is given an outputimage input tensor that is not 4-D, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf depthradius = 1 bias = 1.59018219 alpha = 0.117728651 beta = 0.404427052 inputgrads = tf.random.uniformshape=4,...
PYSEC-2026-3372 TensorFlow vulnerable to segfault in `QuantizedRelu` and `QuantizedRelu6`
Impact If QuantizedRelu or QuantizedRelu6 are given nonscalar inputs for minfeatures or maxfeatures, it results in a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf outtype = tf.quint8 features = tf.constant28, shape=4,2, dtype=tf.quint8 minfeatures...
PYSEC-2026-3216 TensorFlow vulnerable to `CHECK` fail in `Unbatch`
Impact When Unbatch receives a nonscalar input id, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg0=tf.constantvalue=np.random.randomsize=3, 3, 1, dtype=tf.float64 arg1=tf.constantvalue=np.random.randint0,100,size=3, 3, 1,...
PYSEC-2026-3291 TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions
Impact When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. python import tensorflow as tf class QuantConv2DTransposedtf.keras.layers.Layer: def buildself, inputshape: self.kernel = self.addweight"kernel", 3, 3,...
CVE-2024-5846
creationtimestamp| type| source ---|---|--- 2026-07-13 14:00:06+00:00| seen| https://t.me/truesecator/8341 2026-07-14 00:00:44+00:00| seen| https://t.me/truesecator/8341...
CVE-2026-12257
creationtimestamp| type| source ---|---|--- 2026-07-13 13:37:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjstg74rk2w 2026-07-13 14:37:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjw5m3qtw2y 2026-07-13 15:12:04+00:00| seen|...