351 matches found
CVE-2026-65942
TLS hostname verification issue in Apache Ranger Client Code in versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-65945
Logs contain replayable JWT tokens in Apache Ranger versions = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-55799
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-40920 Apache Ranger: Privilege Escalation via URL Parameter
Privilege Escalation via URL Parameter is reported in Apache Ranger versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-55799
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-65945
Apache Ranger is affected by CVE-2026-65945 where logs contain replayable JWT tokens in versions
CVE-2026-65948
UnixAuth lacks brute-force protection in Apache Ranger versions = 2.8.0. Note: UnixAuth is NOT a recommended option for production deployments. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-14313
PeproDev WooCommerce Receipt Uploader PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 slug: pepro-bacs-receipt-upload-for-woocommerce, all versions up to and including 2.8.0 latest on wordpress.org; no fixed version available at the time of writing, is vulnerable to...
CVE-2026-14313
The vulnerability CVE-2026-14313 affects the PeproDev WooCommerce Receipt Uploader WordPress plugin (versions up to 2.8.0). The issue is unauthenticated write access via IDOR (missing authorization) in the Receipt Uploader component, requiring WooCommerce to be present. The provided documents con...
CLEANSTART-2026-CO71096 Security fixes in external-secrets-operator 2.8.0-r0
Package external-secrets-operator version 2.8.0-r0 fixes 1 vulnerabilities: CVE-2026-56852...
CLEANSTART-2026-EH27916 Security fixes in opensearch-k8s-operator-fips 2.8.0-r3
Package opensearch-k8s-operator-fips version 2.8.0-r3 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32289, CVE-2026-32282, CVE-2026-27140, CVE-2026-32288...
CLEANSTART-2026-HA17896 Security fixes in local-static-provisioner 2.8.0-r2
Package local-static-provisioner version 2.8.0-r2 fixes 48 vulnerabilities: ghsa-4x4m-3c2p-qppc, ghsa-r6j8-c6r2-37rr, CVE-2025-13281, CVE-2025-5187, CVE-2026-25679...
CVE-2026-13231
Summary: CVE-2026-13231 affects Drupal Advanced Content Feedback (admin_feedback). The issue is improper neutralization of input during web page generation, causing a Stored XSS vulnerability. The vulnerable component is the admin_feedback module, with affected versions 0.0.0 through 2.8.0. The r...
PYSEC-2026-3160 Integer overflow in Tensorflow
Impact The implementation of OpLevelCostEstimator::CalculateTensorSize is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements: cc int64t OpLevelCostEstimator::CalculateTensorSize const OpInfo::TensorProperties&...
PYSEC-2026-3253 Insecure temporary file in Tensorflow
Impact In multiple places, TensorFlow uses tempfile.mktemp to create temporary files. While this is acceptable in testing, in utilities and libraries it is dangerous as a different process can create the file between the check for the filename in mktemp and the actual creation of the file by a...
PYSEC-2026-3258 Integer overflow leading to crash in Tensorflow
Impact The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation: python import tensorflow as tf import numpy as np tf.rawops.SparseCountSparseOutput indices=1,1, values=2, denseshape=2 31, 2 32,...
Out of bounds read in Tensorflow
ImpactTensorFlow's type inference can cause a heap OOB read as the bounds checking is done in a DCHECK which is a no-op during production:ccif nodet.typeid != TFTUNSET int ix = inputidxi; DCHECKix nodet.argssize "input " i " should have an output " ix " but instead only has " nodet.argssize "...
PYSEC-2026-3127 Out of bounds read and write in Tensorflow
Impact There is a typo in TensorFlow's SpecializeType which results in heap OOB read/write: cc for int i = 0; i argssize; j++ auto arg = t-mutableargsi; // ... Due to a typo, arg is initialized to the ith mutable argument in a loop where the loop index is j. Hence it is possible to assign to arg...