Advisory Catalog

TensorFlow has Floating Point Exception in TensorListSplit with XLA

TensorFlow has Null Pointer Error in RandomShuffle with XLA enable

TensorFlow has Segfault in Bincount with XLA

TensorFlow has null dereference on ParallelConcat with XLA

TensorFlow has double free in Fractional(Max/Avg)Pool

TensorFlow has Floating Point Exception in TFLite in conv kernel

TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad

Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`

CairoSVG improperly processes SVG files loaded from external resources

SAP Cloud SDK for AI Python has OS Command Injection when Program Objects Execution is Enabled

WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.

OWSLib vulnerable to XML External Entity (XXE) Injection

Apache HTTP Server via mod_proxy_uwsgi HTTP response smuggling

Insufficient Session Expiration in pretix

Lemur subject to insecure random generation

vantage6 refresh tokens do not expire

vantage6 vulnerable to Improper Preservation of Permissions

GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection

Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information

Apache Airflow Google Provider Improper Input Validation vulnerability

markdown-it-py Denial of Service vulnerability

markdown-it-py Denial of Service vulnerability in the command line interface

Server-Side Request Forgery in Plone CMS

Improper Restriction of Excessive Authentication Attempts in modoboa

Denial of service vulnerability on Password reset page

Denial of service vulnerability when parsing multipart request body

Resource exhaustion in Django

MultipartParser denial of service with too many fields or files

High resource usage when parsing multipart form data with many fields

Vulnerable OpenSSL included in sgx-dcap-quote-verify-python

IPython vulnerable to command injection via set_term_title

Vulnerable OpenSSL included in cryptography wheels

Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection

Django contains Uncontrolled Resource Consumption via cached header

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 o

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 before 0.13.3.

NYUCCL psiTurk IS vulnerable to Improper Neutralization of Special Elements

Improper Certificate Validation in pyload-ng

Path traversal in binwalk

Directory Traversal in onnx

Improper Input Validation in pyload-ng

mechanize Regular Expression Denial of Service vulnerability

Apache Superset vulnerable to Cross-Site Request Forgery via legacy REST API endpoints

sviehb/jefferson vulnerable to path traversal

SentinelOne impersonated via PyPI packages

rdiffweb vulnerable to Open Redirect

rdiffweb vulnerable to Authentication Bypass by Primary Weakness

rdiffweb has no rate limit on resend email feature

cocagne pysrp vulnerable to side channel leaks

Slixmpp lacks SSL Certificate hostname validation in XMLStream