الباحثون
رجوع
Arjun Shibu
#13797
من 60,403
23.1
إجمالي CVSS
الثغرات
·
3
متوسطة
1
عالية
1
حرجة
1
PT-2021-21796
2021-08-12
9.3
CVE-2021-37678
Google
Tensorflow
TensorFlow and Keras can be tricked to perform arbitrary code execution when deserializing a Keras model from YAML format. The implementation uses `yaml.unsafe load` which can perform arbitrary code execution on the input.
PT-2021-15436
2021-02-09
6.3
CVE-2021-23327
Unknown
Apexcharts
The issue is related to a lack of sanitization of graph legend fields, which can lead to Cross-site Scripting (XSS).
PT-2021-15438
2021-01-31
7.5
CVE-2021-23329
Unknown
Nested-Object-Assign
The issue concerns Prototype Pollution via the default function.