AZL-103485
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103485.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-103485
- Upstream
- CVE-2026-93748
- Published
- 2026-09-18T18:18:33Z
- Modified
- 2026-09-28T05:39:54Z
- Summary
- CVE-2026-93748 affecting package python-tensorboard 2.16.2-6
- Details
-
http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to obtain another user's Set-Cookie session credentials from shared-cache entries that were deliberately zeroed for security reasons.
- References