Researchers
Back
Arjun Shibu
#13816
of 60,403
23.1
Total CVSS
Vulnerabilities
·
3
Medium
1
High
1
Critical
1
PT-2021-21796
2021-08-12
9.3
CVE-2021-37678
Google
Tensorflow
TensorFlow and Keras can be tricked to perform arbitrary code execution when deserializing a Keras model from YAML format. The implementation uses `yaml.unsafe load` which can perform arbitrary code execution on the input.
PT-2021-15436
2021-02-09
6.3
CVE-2021-23327
Unknown
Apexcharts
The issue is related to a lack of sanitization of graph legend fields, which can lead to Cross-site Scripting (XSS).
PT-2021-15438
2021-01-31
7.5
CVE-2021-23329
Unknown
Nested-Object-Assign
The issue concerns Prototype Pollution via the default function.