P4Verified

sprintf-js vulnerable to denial of service through unbounded precision specifiers

CVE-2026-97058 affects azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0. CVSS base score 5.3 (Microsoft Security Response Center). EPSS 0.00366 (percentile 0.28132), scored 2026-10-04. Affected range: <= 1.1.3.

Published 2026-10-06 00:14:27.154796+00:00

CVE: CVE-2026-97058
Product: azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
CCR priority: 21.3 /100 (P4)
CVSS: 5.3 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · Microsoft Security Response Center
EPSS: 0.00366 · percentile 0.28132 · 2026-10-04
KEV: no

Affected products

azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
sprintf-js · <= 1.1.3

Provenance

Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-06 00:14:20.210633+00:00 UTC
FIRST EPSS daily exploit-probability · Source record · observed 2026-10-05 08:16:32.814186+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-97058.html