AZL-99750
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99750.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-99750
- Upstream
- Published
- 2026-09-03T19:17:31Z
- Modified
- 2026-09-08T12:39:40Z
- Summary
- CVE-2026-85393 affecting package python-tensorboard 2.16.2-6
- Details
-
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an incomplete fix for CVE-2026-33894.
- References