python-tensorboard vulnerabilities (Azure Linux)
111 vulnerabilities.
python-tensorboardAzure Linuxbrace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service5.3 Mediumpython-tensorboardAzure Linuxbrace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion7.5 Highpython-tensorboardAzure LinuxAxios: Header Injection via Inherited headers After Minimal Interceptor6.9 Mediumpython-tensorboardAzure LinuxAxios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method6.9 Mediumpython-tensorboardAzure LinuxWithdrawn Advisory: sprintf-js vulnerable to denial of service through unbounded precision specifiers6.9 Mediumpython-tensorboardAzure Linuxhttp-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcard8.2 Highpython-tensorboardAzure Linuxsource-map-js through 1.2.1 Event Loop Denial of Service8.7 Highpython-tensorboardAzure Linuxhttp-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale8.7 Highpython-tensorboardAzure Linuxbraces through 3.0.3 Stack Overflow via Deeply Nested Patterns8.7 Highpython-tensorboardAzure LinuxUncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)8.7 Highpython-tensorboardAzure Linuxproxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet9.1 Criticalpython-tensorboardAzure Linuxcompression vulnerable to Denial of Service via memory leak on premature response close7.5 Highpython-tensorboardAzure Linuxxmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser8.7 Highpython-tensorboardAzure Linuxxmldom: Processing Instruction Target Injection Bypasses requireWellFormed8.7 Highpython-tensorboardAzure Linuxxmldom: Quadratic-memory consumption8.7 Highpython-tensorboardAzure Linuxxmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge8.7 Highpython-tensorboardAzure Linuxxmldom: Quadratic-time attribute deduplication8.7 Highpython-tensorboardAzure Linuxxmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content6.9 Mediumpython-tensorboardAzure Linuxxmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization6.3 Mediumpython-tensorboardAzure Linuxxmldom: DocType `name` Injection Bypasses requireWellFormed8.7 Highpython-tensorboardAzure Linuxxmldom: Element name injection via createElement() bypasses requireWellFormed8.7 Highpython-tensorboardAzure Linuxxmldom: Attribute name injection via setAttribute() bypasses requireWellFormed8.7 Highpython-tensorboardAzure Linuxqs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property6.3 Mediumpython-tensorboardAzure Linuxnode-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding8.7 Highpython-tensorboardAzure Linuxnode-tar Symlink Path Traversal via Drive-Relative Linkpath8.2 Highpython-tensorboardAzure LinuxURLs in meta content attribute actions are not escaped in html/template6.1 Mediumpython-tensorboardAzure LinuxCompress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib9.8 Criticalpython-tensorboardAzure Linuxnode-tar: Hardlink Path Traversal via Drive-Relative Linkpath8.2 Highpython-tensorboardAzure Linuxminimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments7.5 Highpython-tensorboardAzure Linuxbody-parser vulnerable to denial of service when url encoding is enabled7.5 Highpython-tensorboardAzure Linuxexpress vulnerable to XSS via response.redirect()5.0 Mediumpython-tensorboardAzure LinuxDOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS)6.4 Mediumpython-tensorboardAzure LinuxFollow Redirects improperly handles URLs in the url.parse() function7.3 Highpython-tensorboardAzure LinuxDenial-of-Service in gRPC7.5 Highpython-tensorboardAzure Linuxxmldom allows multiple root nodes in a DOM9.4 Criticalpython-tensorboardAzure LinuxWithdrawn: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @xmldom/xmldom and xmldom9.8 Criticalpython-tensorboardAzure LinuxOut of Memory issue in ProtocolBuffers for cpp and python7.5 Highpython-tensorboardAzure LinuxForge: Denial of service in TLS record processing via call stack exhaustion7.5 Highpython-tensorboardAzure LinuxForge: AES-GCM authentication bypass via unvalidated tagLength option5.9 Mediumpython-tensorboardAzure LinuxForge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count7.5 Highpython-tensorboardAzure LinuxForge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store3.7 Lowpython-tensorboardAzure LinuxForge: Regular expression denial of service in PEM decoding (pem.decode)7.5 Highpython-tensorboardAzure LinuxGo before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and...7.5 Highpython-tensorboardAzure LinuxArbitrary code execution in go command with cgo in cmd/go and cmd/cgo7.5 Highpython-tensorboardAzure LinuxGo before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as...5.9 Mediumpython-tensorboardAzure LinuxSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service7.5 Highpython-tensorboardAzure LinuxSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service7.5 Highpython-tensorboardAzure LinuxAn issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker...6.1 Medium