Lucene search
+L
PypaMost viewed

7327 matches found

PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

PraisonAIAgents: Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary

SummaryThe listfiles tool in FileTools validates the directory parameter against workspace boundaries via validatepath, but passes the pattern parameter directly to Path.glob without any validation. Since Python's Path.glob supports .. path segments, an attacker can use relative path traversal in...

5.3CVSS6.2AI score0.00311EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)

SummaryThe Flask API endpoint in src/praisonai/api.py renders agent output as HTML without effective sanitization. The sanitizehtml function relies on the nh3 library, which is not listed as a required or optional dependency in pyproject.toml. When nh3 is absent the default installation, the...

6.1CVSS6.2AI score0.00216EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

Summaryinternalexrundopiz advances the working wavelet pointer with signed 32-bit arithmetic:cwavbuf += nx ny wcount;Because nx, ny, and wcount are int, a crafted EXR file can make this product overflow and wrap. The next channel then decodes from an incorrect address. The wavelet decode path...

8.8CVSS7AI score0.00482EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file write

ImpactPartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a partition ID could cause files to be written outside the configured...

6.5CVSS6.1AI score0.00427EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

PraisonAI recipe registry pull path traversal writes files outside the chosen output directory

SummaryPraisonAI's recipe registry pull flow extracts attacker-controlled .praison tar archives with tar.extractall and does not validate archive member paths before extraction. A malicious publisher can upload a recipe bundle that contains ../ traversal entries and any user who later pulls that...

7.3CVSS6.2AI score0.00291EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)

SummaryThe PXR24 decompression function undopxr24impl in OpenEXR internalpxr24.c ignores the actual decompressed size outSize returned by exruncompressbuffer and instead reads from the scratch buffer based solely on the expected size uncompressedsize derived from the header metadata.Additionally,...

8.7CVSS6.2AI score0.00482EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

OpenEXR: integer overflow to OOB write in uncompress_b44_impl()

SummaryThe B44/B44A decoder in OpenEXR reconstructs row pointers into a scratch buffer using int. When the channel width nx is large enough, the product y nx overflows int, causing the row pointer to wrap before the start of the scratch buffer. Subsequent memcpy calls then write decoded pixel...

8.4CVSS7AI score0.00244EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

vLLM: Server-Side Request Forgery (SSRF) in `download_bytes_from_url `

SummaryA Server Side Request Forgery SSRF vulnerability in downloadbytesfromurl allows any actor who can control batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the server, without any URL validation or domain restrictions.This can be used to target interna...

5.4CVSS6.1AI score0.00246EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

PraisonAI Has Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox

SummarySubprocessSandbox in all modes BASIC, STRICT, NETWORKISOLATED calls subprocess.run with shell=True and relies solely on string-pattern matching to block dangerous commands. The blocklist does not include sh or bash as standalone executables, allowing trivial sandbox escape in STRICT mode v...

10CVSS6.1AI score0.00383EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Open WebUI has Broken Access Control in Tool Valves

Summary Broken Access Control in Tool ValvesOpen WebUI supports function calling through "Tools". Function calling allows an LLM to reliably connect to external tools and interact with external APIs. Exemplary use-cases include connecting to an internal knowledge base, retrieving emails from an...

7.7CVSS6.2AI score0.05008EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Open WebUI's Insecure Direct Object Reference (IDOR) allows access to other users' memories

SummaryAny authenticated user can read other users' private memories via /api/v1/retrieval/query/collection DetailsVulnerability 1: Missing authorization in collection queryingIn backend/openwebui/routers/retrieval.py, the querycollectionhandler function accepts a list of collectionnames but...

4.3CVSS6.1AI score0.00253EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Hugging Face Smolagents has an Injection issue

A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluateaugassign/evaluatecall/evaluatewith of the file src/smolagents/localpythonexecutor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to...

10CVSS6.4AI score0.00575EPSS
SaveExploits1References11Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

A security flaw has been discovered in pygments before 2.20.0. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been release...

4.8CVSS5.8AI score0.00156EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Open WebUI has unauthorized deletion of knowledge files

SummaryAn access control check is missing when deleting a file from a knowledge base. The only check being done is that the user has write access to the knowledge base or is admin, but NOT that the file actually belongs to this knowledge base. It is thus possible to delete arbitrary files from...

8.1CVSS6.2AI score0.00252EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution

SummaryPySpector versions = 0.1.6 are affected by a stored Cross-Site Scripting XSS vulnerability in the HTML report generator. When PySpector scans a Python file containing JavaScript payloads i.e. inside a string passed to eval , the flagged code snippet is interpolated into the HTML report...

6.1CVSS6.3AI score0.00217EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

mcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint

SummaryThe /api/health/detailed endpoint returns detailed system information including OS version, Python version, CPU count, memory totals, disk usage, and the full database filesystem path. When MCPALLOWANONYMOUSACCESS=true is set required for the HTTP server to function without OAuth/API key,...

5.3CVSS6.1AI score0.00369EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Apache Airflow AWS Auth Manager has Host Header Injection Leading to SAML Authentication Bypass

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL.This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances.You shoul...

5.4CVSS6AI score0.00359EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution

ContextA Remote Code Execution vulnerability exists in LangGraph's caching layer when applications enable cache backends that inherit from BaseCache and opt nodes into caching via CachePolicy. Prior to langgraph-checkpoint 4.0.0, BaseCache defaults to JsonPlusSerializerpicklefallback=True. When...

6.6CVSS7.5AI score0.00698EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Rucio WebUI has a Reflected Cross-site Scripting Vulnerability

SummaryA reflected Cross-site Scripting vulnerability was located in the rendering of the ExceptionMessage of the WebUI 500 error which could allow attackers to steal login session tokens of users who navigate to a specially crafted URL. DetailsThe WebUI error message renders ExceptionMessage whi...

8.1CVSS6.1AI score0.00263EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Apache Superset allows authenticated users to view sensitive data without explicit permissions

A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information. The Tag endpoint disabled by default allows users to retrieve a list of objects associated with a specific tag.When these associated objects include Users, the AP...

6.5CVSS6.1AI score0.004EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections

An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypass the read-only verification check when using a PostgreSQL database connection.While the system effectively blocks standard Data Manipulation Language DML statements...

7.1CVSS6.1AI score0.00348EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

yt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option

SummaryWhen yt-dlp's --netrc-cmd command-line option or netrccmd Python API parameter is used, an attacker could achieve arbitrary command injection on the user's system with a maliciously crafted URL. Impactyt-dlp maintainers assume the impact of this vulnerability to be high for anyone who uses...

8.8CVSS6.1AI score0.01596EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation

Scrapy versions up to 2.13.3 are vulnerable to a denial of service DoS attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of...

7.5CVSS7AI score0.00502EPSS
SaveExploits0References12Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling

SummaryA Server-Side Request Forgery SSRF vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially...

8.6CVSS6.7AI score0.0058EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL

SummaryA Path Traversal vulnerability in the Pydantic AI web UI allows an attacker to serve arbitrary JavaScript in the context of the application by crafting a malicious URL. If a victim clicks the link or visits it via an iframe, attacker-controlled code executes in their browser, enabling thef...

7.1CVSS6.2AI score0.00324EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Langflow Missing Authentication on Critical API Endpoints

SummaryMultiple critical API endpoints in Langflow are missing authentication controls, allowing any unauthenticated user to access sensitive user conversation data, transaction histories, and perform destructive operations including message deletion. This affects endpoints handling personal data...

9.3CVSS7.1AI score0.34703EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Composio Command Execution vulnerability

composio =0.5.40 is vulnerable to Command Execution in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...

6.4CVSS6.1AI score0.00584EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Litestar and Starlite vulnerable to Path Traversal

SummaryLocal File Inclusion via Path Traversal in LiteStar Static File ServingA Local File Inclusion LFI vulnerability has been discovered in the static file serving component of LiteStar. This vulnerability allows attackers to exploit path traversal flaws, enabling unauthorized access to sensiti...

8.2CVSS7.1AI score0.00722EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

Werkzeug possible resource exhaustion when parsing file data in forms

Applications using Werkzeug to parse multipart/form-data requests are vulnerable to resource exhaustion. A specially crafted form body can bypass the Request.maxformmemorysize setting.The Request.maxcontentlength setting, as well as resource limits provided by deployment software and platforms, a...

7.5CVSS6.7AI score0.01095EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

OpenStack Cinder, Glance, and Nova vulnerable to arbitrary file access

An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to...

7.1CVSS6.7AI score0.00835EPSS
SaveExploits0References17Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.16 views

TensorFlow has segfault in array_ops.upper_bound

Impactarrayops.upperbound causes a segfault when not given a rank 2 tensor. PatchesWe have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586.The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more informationPlease...

8.7CVSS6.1AI score0.00429EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:20 p.m.16 views

Apache Airflow missing Certificate Validation

Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, andApache Airflow before 2.7.0 are affected by theValidation of OpenSSL Certificate vulnerability.The default SSL context with SSL library did not check a server's X.509certificate. Instead, the code accepted an...

5.9CVSS6.4AI score0.00797EPSS
SaveExploits0References12Affected Software1
PyPA
PyPA
added 2026/07/13 2:20 p.m.16 views

Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow.Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backendNote: thevulnerability is about the information exposed in the logs not abo...

7.5CVSS7AI score0.01203EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:20 p.m.16 views

TensorFlow Denial of Service vulnerability

ImpactA malicious invalid input crashes a tensorflow model Check Failed and can be used to trigger a denial of service attack.To minimize the bug, we built a simple single-layer TensorFlow model containing a Convolution3DTranspose layer, which works well with expected inputs and can be deployed i...

6.5CVSS6.7AI score0.00432EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:20 p.m.16 views

Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability

Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.Thisvulnerability is considered low since it requires DAG code to use getsqlalchemyconnection and someone with access to connection resources...

4.3CVSS6.1AI score0.01263EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:20 p.m.16 views

TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch

ImpactIf the parameter indices for DynamicStitch does not match the shape of the parameter data, it can trigger an stack OOB read.pythonimport tensorflow as tffunc = tf.rawops.DynamicStitchpara='indices': 0xdeadbeef, 405, 519, 758, 1015, 'data': 110.27793884277344, 120.29475402832031,...

7.5CVSS6.6AI score0.00391EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:20 p.m.16 views

TensorFlow vulnerable to integer overflow in EditDistance

ImpactTFversion 2.11.0 //tensorflow/core/ops/arrayops.cc:1067 const Tensor hypothesisshapet = c-inputtensor2; std::vector dimshypothesisshapet-NumElements - 1; for int i = 0; i MakeDimstd::maxhvaluesi, tvaluesi; if hypothesisshapet is empty, hypothesisshapet-NumElements - 1 will be integer...

7.5CVSS6.6AI score0.00391EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize

ImpactNPE in QuantizedMatMulWithBiasAndDequantize with MKL enable pythonimport tensorflow as tffunc = tf.rawops.QuantizedMatMulWithBiasAndDequantizepara='a': tf.constant138, dtype=tf.quint8, 'b': tf.constant4, dtype=tf.qint8, 'bias': 31.81644630432129, 47.21876525878906, 109.95201110839844,...

7.5CVSS6.6AI score0.00391EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

TensorFlow has Null Pointer Error in SparseSparseMaximum

ImpactWhen SparseSparseMaximum is given invalid sparse tensors as inputs, it can give an NPE. pythonimport tensorflow as tftf.rawops.SparseSparseMaximum aindices=1, avalues = 0.1 , ashape = 2, bindices=, bvalues =2 , bshape = 2, PatchesWe have patched the issue in GitHub commit...

7.5CVSS6.6AI score0.00439EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

TensorFlow has Floating Point Exception in AudioSpectrogram

Impactversion:2.11.0 //core/ops/audioops.cc:70Status SpectrogramShapeFnInferenceContext c ShapeHandle input; TFRETURNIFERRORc-WithRankc-input0, 2, ; int32t windowsize; TFRETURNIFERRORc-GetAttr"windowsize", size; int32t stride; TFRETURNIFERRORc-GetAttr"stride", ; .....1DimensionHandle inputlength ...

7.5CVSS6.6AI score0.00383EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

TensorFlow has Floating Point Exception in TensorListSplit with XLA

ImpactFPE in TensorListSplit with XLA pythonimport tensorflow as tffunc = tf.rawops.TensorListSplitpara = 'tensor': 1, 'elementshape': -1, 'lengths': [email protected]=Truedef fuzzjit: y = funcpara return yprintfuzzjit PatchesWe have patched the issue in GitHub commit...

7.5CVSS6.6AI score0.00391EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad

ImpactOut of bounds read in GRUBlockCellGradpythonfunc = tf.rawops.GRUBlockCellGradpara = 'x': 21.1, 156.2, 83.3, 115.4, 'hprev': array136.5, 136.6, 'wru': array26.7, 0.8, 47.9, 26.1, 26.2, 26.3, 'wc': array 0.4, 31.5, 0.6, 'bru': array0.1, 0.2 , dtype=float32, 'bc': 0x41414141, 'r': array0.3, 0....

7.5CVSS6.9AI score0.00383EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

TensorFlow has Floating Point Exception in TFLite in conv kernel

ImpactConstructing a tflite model with a paramater filterinputchannel of less than 1 gives a FPE. PatchesWe have patched the issue in GitHub commit 34f8368c535253f5c9cb3a303297743b62442aaa.The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1. For...

7.5CVSS6.7AI score0.00391EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

Overflow in `ResizeNearestNeighborGrad`

ImpactWhen tf.rawops.ResizeNearestNeighborGrad is given a large size input, it overflows.import tensorflow as tfaligncorners = Truehalfpixelcenters = Falsegrads = tf.constant1, shape=1,8,16,3, dtype=tf.float16size = tf.constant1879048192,1879048192, shape=2,...

7.5CVSS6.9AI score0.00453EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

Overflow in `ResizeNearestNeighborGrad`

ImpactWhen tf.rawops.ResizeNearestNeighborGrad is given a large size input, it overflows.import tensorflow as tfaligncorners = Truehalfpixelcenters = Falsegrads = tf.constant1, shape=1,8,16,3, dtype=tf.float16size = tf.constant1879048192,1879048192, shape=2,...

7.5CVSS6.9AI score0.00453EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

`CHECK` fail via inputs in `PyFunc`

ImpactAn input token that is not a UTF-8 bytestring will trigger a CHECK fail in tf.rawops.PyFunc.pythonimport tensorflow as tfvalue = tf.constantvalue=1,2token = b'\xb0'dataType = tf.int32tf.rawops.PyFuncinput=value,token=token,Tout=dataType PatchesWe have patched the issue in GitHub commit...

7.5CVSS6.9AI score0.00463EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

`CHECK` fail via inputs in `SdcaOptimizer`

ImpactInputs densefeatures or examplestatedata not of rank 2 will trigger a CHECK fail in SdcaOptimizer.pythonimport tensorflow as tftf.rawops.SdcaOptimizer sparseexampleindices=4 tf.random.uniform5,5,5,3, dtype=tf.dtypes.int64, maxval=100, sparsefeatureindices=4 tf.random.uniform5,5,5,3,...

7.5CVSS6.9AI score0.00453EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess

ImpactAn input poolingratio that is smaller than 1 will trigger a heap OOB in tf.rawops.FractionalMaxPool and tf.rawops.FractionalAvgPool. PatchesWe have patched the issue in GitHub commit 216525144ee7c910296f5b05d214ca1327c9ce48.The fix will be included in TensorFlow 2.11.0. We will also cherry...

9.8CVSS7AI score0.00603EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

`CHECK` fail via inputs in `SparseFillEmptyRowsGrad`

ImpactIf SparseFillEmptyRowsGrad is given empty inputs, TensorFlow will crash.pythonimport tensorflow as tftf.rawops.SparseFillEmptyRowsGrad reverseindexmap=, gradvalues=, name=None PatchesWe have patched the issue in GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8.The fix will be included...

7.5CVSS6.9AI score0.00453EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.16 views

`CHECK` fail in `BCast` overflow

ImpactIf BCast::ToShape is given input larger than an int32, it will crash, despite being supposed to handle up to an int64. An example can be seen in tf.experimental.numpy.outer by passing in large input to the input b.pythonimport tensorflow as tfvalue = tf.constantshape=2, 1024, 1024, 1024,...

7.5CVSS6.9AI score0.00452EPSS
SaveExploits1References7Affected Software1
Total number of security vulnerabilities5000