Open Source Vulnerabilities

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

TensorFlow vulnerable to `CHECK` fail in `tf.sparse.cross`

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`

github.com/sigstore/cosign

Cosign bundle can be crafted to successfully verify a blob even if the embedded rekorBundle does not reference the given signature

typo3/html-sanitizer, typo3/html-sanitizer, typo3/cms-core, typo3/cms-core, typo3/cms, typo3/cms

TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection

github.com/fluxcd/helm-controller, github.com/fluxcd/flux2

Helm Controller denial of service

react/http

ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent

nodebb

NodeBB account takeover via SSO plugins