AZL-111401

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111401.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-111401
Upstream
Published
2026-10-23T14:17:52Z
Modified
2026-10-29T14:16:54Z
Summary
CVE-2026-115754 affecting package python-tensorboard 2.16.2-6
Details

serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allows attackers to break out of HTML script elements by ending serialized function source text with an unescaped </script. Attackers controlling a function's source via a spoofed toString() can combine surrounding output delimiters and later values to inject live markup such as img onerror handlers.

References

Affected packages

Azure Linux:3 / python-tensorboard

Package

Name
python-tensorboard
Purl
pkg:rpm/azure-linux/python-tensorboard

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
2.16.2-6

Database specific

source 
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111401.json"