python-tensorboard

7 results · Clear filters · Feed

• Critical 9.1
  CVE-2026-91403 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 21, 2026
• Critical 9.1
  CVE-2026-108267

  Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

  Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the …

  Privasys go golang tensorflow Azure Linux
  Oct 9, 2026
• Critical 9.1
  CVE-2026-78663

  Double flow control refund on HTTP/2 server streams in net/http

  The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client…

  Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  Oct 8, 2026
• Critical 9.2
  CVE-2026-102992

  piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env

  piscina is a node.js worker pool implementation. Prior to 4.9.4, 5.3.2, and 6.0.0-rc.5, Piscina stores ThreadPool.options in src/index.ts as a plain object that inherits from Object.prototype. Applications with a separate prototype-pollution primitive can the…

  piscinajs piscina python-tensorboard piscina Azure Linux npm
  Sep 30, 2026
• Critical 9.1
  CVE-2026-90711

  proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

  proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-sized prefix, …

  proxy-addr proxy-addr langfuse-3-worker kubeflow-centraldashboard Debian Ubuntu Azure Linux Wolfi npm
  Sep 15, 2026
• Critical 9.8
  CVE-2026-3381

  Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

  Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit o…

  PMQS Compress::Raw::Zlib mysql rust Debian Ubuntu Azure Linux Alpine
  Mar 5, 2026
• Critical 9.4
  CVE-2022-39353

  xmldom allows multiple root nodes in a DOM

  xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. xmldom parses XML that is not well-formed because it contains multiple top level elements, and adds all root nodes to the `childNodes` collection of …

  xmldom xmldom python-tensorboard node-xmldom Debian Ubuntu Azure Linux npm
  Nov 2, 2022