AZL-105254

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105254.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-105254
Upstream
Published
2026-09-24T14:18:21Z
Modified
2026-10-02T05:34:59Z
Summary
CVE-2026-97058 affecting package python-tensorboard 2.16.2-6
Details

sprintf-js through 1.1.3 passes unbounded precision specifiers to toFixed, toExponential, and toPrecision methods without validation, causing uncaught RangeError exceptions. Attackers who control format strings can inject precision values exceeding ECMAScript limits to abort calling operations with minimal payload.

References

Affected packages

Azure Linux:3 / python-tensorboard

Package

Name
python-tensorboard
Purl
pkg:rpm/azure-linux/python-tensorboard

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
2.16.2-6

Database specific

source 
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105254.json"