AZL-103487
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103487.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-103487
- Upstream
- CVE-2026-93750
- Published
- 2026-09-18T18:18:33Z
- Modified
- 2026-09-28T05:39:54Z
- Summary
- CVE-2026-93750 affecting package python-tensorboard 2.16.2-6
- Details
-
http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the _varyMatches() function that fails to properly validate Vary header wildcards due to byte-for-byte string comparison. Attackers can request URLs previously fetched by other clients to receive cached responses intended for different users, disclosing sensitive information across clients.
- References