GHSA-XWG4-73V4-XW9W vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

CVE-2026-59724 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

GHSA-JXWJ-J7WR-GFRW vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

CVE-2026-73086 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

CVE-2026-53606 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

GHSA-GR94-W7QR-F4J3 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

AZL-99876 CVE-2026-80231 affecting package tensorflow 2.16.1-11

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

AZL-99873 CVE-2026-80230 affecting package tensorflow 2.16.1-11

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

AZL-99870 CVE-2026-19931 affecting package tensorflow 2.16.1-11

A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...

AZL-99879 CVE-2026-18924 affecting package tensorflow 2.16.1-11

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

AZL-99884 CVE-2026-13608 affecting package tensorflow 2.16.1-11

A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...

GHSA-QWM4-QH6W-59XR vulnerabilities

Vulnerabilities for packages: kubeflow-katib, py3.14-virtualenv, tensorflow-gpu-jupyter, datadog-agent, datadog-agent-fips...

CVE-2026-13346 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, py3.14-virtualenv, tensorflow-gpu-jupyter, datadog-agent, datadog-agent-fips...

frigate v0.18.0-rc1

Frigate NVR™ - Realtime Object Detection for IP Cameras English | 简体中文 A complete and local NVR designed for Home Assistant with AI object detection. Uses OpenCV and Tensorflow to perform realtime object detection locally for IP cameras. Use of a GPU or AI accelerator is highly recommended. AI...

AZL-98217 CVE-2026-15310 affecting package tensorflow 2.16.1-11

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

CVE-2026-73417 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

CVE-2026-73415 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

CVE-2026-73416 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

CVE-2026-20728

Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege...

CVE-2026-20728

Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege...