Open Source Vulnerabilities

libwebp, libwebp, libwebp

libwebp, libwebp, libwebp

libwebp, libwebp, libwebp

CVE-2020-36332 does not affect BellSoft software

github.com/Masterminds/goutils

RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be

github.com/cloudflare/tableflip

A failed upgrade may lead to hung goroutines

github.com/google/exposure-notifications-server, github.com/google/exposure-notifications-server

Import of incorrectly embargoed keys could cause early publication

github.com/pomerium/pomerium

JWT leak via Open Redirect in Programmatic access

github.com/pomerium/pomerium

pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

github.com/filecoin-project/lotus

BLS Signature "Malleability"

github.com/syncthing/syncthing

Crash due to malformed relay protocol message

github.com/nats-io/nats-server/v2

github.com/nats-io/nats-server Import token permissions checking not enforced

github.com/nats-io/nats-server/v2

Import loops in account imports, nats-server DoS

github.com/nats-io/nats-server/v2

Nil dereference in NATS JWT causing DoS of nats-server

github.com/nats-io/nats-server/v2

Incorrect handling of credential expiry by /nats-io/nats-server

linux, linux, linux

netatalk, netatalk

linux-hwe-edge, linux-aws-5.0, linux-aws-5.3, linux-azure, linux-azure-5.3, linux-azure-edge, linux-gcp, linux-gcp-5.3, linux-gcp-edge, linux-gke-4.15, linux-hwe, linux-hwe-edge, linux-oem, linux-oracle-5.0, linux-oracle-5.3, linux-aws-5.8, linux-azure-5.8, linux-gcp-5.8, linux-hwe-5.8, linux-oem-5.10, linux-oracle-5.8, linux-riscv-5.8, linux-raspi2, linux-riscv

netatalk, netatalk

Security Beta update for Salt

Security Beta update for Salt

github.com/google/exposure-notifications-verification-server

Privilege escalation in rbac

github.com/cilium/cilium, github.com/cilium/cilium, github.com/cilium/cilium

Network policy may be bypassed by some ICMP Echo Requests

github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd/v2

Possible XSS when using SSO with the CLI in github.com/argoproj/argo-cd/v2

github.com/argoproj/argo-cd, github.com/argoproj/argo-cd

Helm OCI credentials leaked into Argo CD logs

github.com/spiffe/spire, github.com/spiffe/spire, github.com/spiffe/spire, github.com/spiffe/spire, github.com/spiffe/spire

Legacy Node API Allows Impersonation in github.com/spiffe/spire/pkg/server/endpoints/node

shopware/shopware

Information leakage in Error Handler

shopware/shopware

Authenticated Stored XSS in Administration

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Segfault in `tf.raw_ops.SparseCountSparseOutput`

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Crash in `tf.transpose` with complex inputs

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Crash in `tf.strings.substr` due to `CHECK`-fail

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Null dereference in Grappler's `TrySimplify`

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Stack overflow in `ParseAttrValue` with nested tensors

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Interpreter crash from `tf.io.decode_raw`

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Incomplete validation in `tf.raw_ops.CTCLoss`

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Heap buffer overflow in `BandedTriangularSolve`

tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu

Incomplete validation in `SparseReshape`

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Invalid validation in `QuantizeAndDequantizeV2`

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Incomplete validation in `SparseAdd`

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Heap OOB and null pointer dereference in `RaggedTensorToTensor`

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Heap OOB read in TFLite

tensorflow, tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Integer overflow in TFLite memory allocation