TensorLayer CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM TensorLayer CVE published 2026-10-13

CVE-2026-108958

A weakness in TensorLayer's HDF5 loading functionality can lead to deserialization issues, affecting versions up to 2.2.4. The attack can be executed remotely. The project was informed early but has not responded yet. This issue requires defenders to assess exposure and prioritize verification of affected versions, considering potential deserialization issues and the need for remediation. The CVE record a [truncated]