AZL-112472

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112472.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-112472

Upstream

CVE-2026-119187

Published

2026-10-29T20:17:29Z

Modified

2026-11-02T14:18:11Z

Summary

CVE-2026-119187 affecting package python-tensorboard 2.16.2-6

Details

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection(), TLS record processing, process() to process the relevant input or security decision. node-forge processed received TLS records recursively, consuming one JavaScript stack frame per record in a single input chunk. A remote peer could send thousands of small records together and exhaust the call stack, causing an uncaught exception and denial of service. This issue is fixed in version 1.4.1.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-119187

Affected packages

Azure Linux:3 / python-tensorboard

Package

Name: python-tensorboard
Purl: pkg:rpm/azure-linux/python-tensorboard

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

2.16.2-6

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112472.json"