AZL-103478

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103478.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-103478
Upstream
Published
2026-09-18T18:18:33Z
Modified
2026-09-27T05:34:32Z
Summary
CVE-2026-93749 affecting package python-tensorboard 2.16.2-6
Details

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the service from handling other requests.

References

Affected packages

Azure Linux:3 / python-tensorboard

Package

Name
python-tensorboard
Purl
pkg:rpm/azure-linux/python-tensorboard

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
2.16.2-6

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103478.json"