Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/tensorflow-cpu@2.5.0
Typepypi
Namespace
Nametensorflow-cpu
Version2.5.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.6.0rc2
Latest_non_vulnerable_version2.11.1
Affected_by_vulnerabilities
0
url VCID-1966-8tnk-77gv
vulnerability_id VCID-1966-8tnk-77gv
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-596.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-596.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-794.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-794.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-305.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-305.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/div.cc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/div.cc
5
reference_url https://github.com/tensorflow/tensorflow/commit/1e206baedf8bef0334cca3eb92bab134ef525a28
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/1e206baedf8bef0334cca3eb92bab134ef525a28
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rhrq-64mq-hf9h
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rhrq-64mq-hf9h
7
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37683
reference_id CVE-2021-37683
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37683
9
reference_url https://github.com/advisories/GHSA-rhrq-64mq-hf9h
reference_id GHSA-rhrq-64mq-hf9h
reference_type
scores
url https://github.com/advisories/GHSA-rhrq-64mq-hf9h
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37683, GHSA-rhrq-64mq-hf9h, PYSEC-2021-305, PYSEC-2021-596, PYSEC-2021-794
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1966-8tnk-77gv
1
url VCID-1d58-76k6-gqhe
vulnerability_id VCID-1d58-76k6-gqhe
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-565.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-565.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-763.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-763.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-274.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-274.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/5ecec9c6fbdbc6be03295685190a45e7eee726ab
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/5ecec9c6fbdbc6be03295685190a45e7eee726ab
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m7fm-4jfh-jrg6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m7fm-4jfh-jrg6
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37652
reference_id CVE-2021-37652
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37652
8
reference_url https://github.com/advisories/GHSA-m7fm-4jfh-jrg6
reference_id GHSA-m7fm-4jfh-jrg6
reference_type
scores
url https://github.com/advisories/GHSA-m7fm-4jfh-jrg6
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37652, GHSA-m7fm-4jfh-jrg6, PYSEC-2021-274, PYSEC-2021-565, PYSEC-2021-763
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1d58-76k6-gqhe
2
url VCID-217a-71wn-nybg
vulnerability_id VCID-217a-71wn-nybg
summary Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorFlow can fail to specialize a type during shape inference. This case is covered by the `DCHECK` function however, `DCHECK` is a no-op in production builds and an assertion failure in debug builds. In the first case execution proceeds to the `ValueOrDie` line. This results in an assertion failure as `ret` contains an error `Status`, not a value. In the second case we also get a crash due to the assertion failure. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-81.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-81.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-136.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-136.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.cc#L168-L174
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.cc#L168-L174
4
reference_url https://github.com/tensorflow/tensorflow/commit/cb164786dc891ea11d3a900e90367c339305dc7b
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/cb164786dc891ea11d3a900e90367c339305dc7b
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rww7-2gpw-fv6j
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rww7-2gpw-fv6j
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23572
reference_id CVE-2022-23572
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23572
7
reference_url https://github.com/advisories/GHSA-rww7-2gpw-fv6j
reference_id GHSA-rww7-2gpw-fv6j
reference_type
scores
url https://github.com/advisories/GHSA-rww7-2gpw-fv6j
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23572, GHSA-rww7-2gpw-fv6j, PYSEC-2022-136, PYSEC-2022-81
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-217a-71wn-nybg
3
url VCID-2hj4-bbfq-xqfj
vulnerability_id VCID-2hj4-bbfq-xqfj
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateTensorSize` is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-84.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-84.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-139.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-139.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L1552-L1558
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L1552-L1558
4
reference_url https://github.com/tensorflow/tensorflow/commit/fcd18ce3101f245b083b30655c27b239dc72221e
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/fcd18ce3101f245b083b30655c27b239dc72221e
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c94w-c95p-phf8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c94w-c95p-phf8
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23575
reference_id CVE-2022-23575
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23575
7
reference_url https://github.com/advisories/GHSA-c94w-c95p-phf8
reference_id GHSA-c94w-c95p-phf8
reference_type
scores
url https://github.com/advisories/GHSA-c94w-c95p-phf8
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23575, GHSA-c94w-c95p-phf8, PYSEC-2022-139, PYSEC-2022-84
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2hj4-bbfq-xqfj
4
url VCID-2k1k-p7zh-guew
vulnerability_id VCID-2k1k-p7zh-guew
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-554.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-554.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-752.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-752.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-263.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-263.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/a2b743f6017d7b97af1fe49087ae15f0ac634373
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/a2b743f6017d7b97af1fe49087ae15f0ac634373
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c8h-vvrj-w2p8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c8h-vvrj-w2p8
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37641
reference_id CVE-2021-37641
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37641
8
reference_url https://github.com/advisories/GHSA-9c8h-vvrj-w2p8
reference_id GHSA-9c8h-vvrj-w2p8
reference_type
scores
url https://github.com/advisories/GHSA-9c8h-vvrj-w2p8
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37641, GHSA-9c8h-vvrj-w2p8, PYSEC-2021-263, PYSEC-2021-554, PYSEC-2021-752
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2k1k-p7zh-guew
5
url VCID-2pkc-gdjx-7bcf
vulnerability_id VCID-2pkc-gdjx-7bcf
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-563.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-563.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-761.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-761.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-272.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-272.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/e0b6e58c328059829c3eb968136f17aa72b6c876
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e0b6e58c328059829c3eb968136f17aa72b6c876
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f8h4-7rgh-q2gm
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f8h4-7rgh-q2gm
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37650
reference_id CVE-2021-37650
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37650
8
reference_url https://github.com/advisories/GHSA-f8h4-7rgh-q2gm
reference_id GHSA-f8h4-7rgh-q2gm
reference_type
scores
url https://github.com/advisories/GHSA-f8h4-7rgh-q2gm
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37650, GHSA-f8h4-7rgh-q2gm, PYSEC-2021-272, PYSEC-2021-563, PYSEC-2021-761
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2pkc-gdjx-7bcf
6
url VCID-2sak-438s-bbg8
vulnerability_id VCID-2sak-438s-bbg8
summary Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a heap OOB write in `Grappler`. The `set_output` function writes to an array at the specified index. Hence, this gives a malicious user a write primitive. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-75.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-75.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-130.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-130.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.h#L394
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.h#L394
4
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/graph_properties.cc#L1132-L1141
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/graph_properties.cc#L1132-L1141
5
reference_url https://github.com/tensorflow/tensorflow/commit/97282c6d0d34476b6ba033f961590b783fa184cd
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/97282c6d0d34476b6ba033f961590b783fa184cd
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5qw5-89mw-wcg2
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5qw5-89mw-wcg2
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23566
reference_id CVE-2022-23566
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23566
8
reference_url https://github.com/advisories/GHSA-5qw5-89mw-wcg2
reference_id GHSA-5qw5-89mw-wcg2
reference_type
scores
url https://github.com/advisories/GHSA-5qw5-89mw-wcg2
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23566, GHSA-5qw5-89mw-wcg2, PYSEC-2022-130, PYSEC-2022-75
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2sak-438s-bbg8
7
url VCID-2t7w-zpd8-suc9
vulnerability_id VCID-2t7w-zpd8-suc9
summary Tensorflow is an Open Source Machine Learning Framework. In multiple places, TensorFlow uses `tempfile.mktemp` to create temporary files. While this is acceptable in testing, in utilities and libraries it is dangerous as a different process can create the file between the check for the filename in `mktemp` and the actual creation of the file by a subsequent operation (a TOC/TOU type of weakness). In several instances, TensorFlow was supposed to actually create a temporary directory instead of a file. This logic bug is hidden away by the `mktemp` function usage. We have patched the issue in several commits, replacing `mktemp` with the safer `mkstemp`/`mkdtemp` functions, according to the usage pattern. Users are advised to upgrade as soon as possible.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-72.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-72.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-127.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-127.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wc4g-r73w-x8mm
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wc4g-r73w-x8mm
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23563
reference_id CVE-2022-23563
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23563
5
reference_url https://github.com/advisories/GHSA-wc4g-r73w-x8mm
reference_id GHSA-wc4g-r73w-x8mm
reference_type
scores
url https://github.com/advisories/GHSA-wc4g-r73w-x8mm
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23563, GHSA-wc4g-r73w-x8mm, PYSEC-2022-127, PYSEC-2022-72
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2t7w-zpd8-suc9
8
url VCID-3e9u-gag2-e3bn
vulnerability_id VCID-3e9u-gag2-e3bn
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-585.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-585.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-783.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-783.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-294.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-294.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/a4e138660270e7599793fa438cd7b2fc2ce215a6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/a4e138660270e7599793fa438cd7b2fc2ce215a6
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hj3-vjjf-f5m7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hj3-vjjf-f5m7
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37672
reference_id CVE-2021-37672
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37672
8
reference_url https://github.com/advisories/GHSA-5hj3-vjjf-f5m7
reference_id GHSA-5hj3-vjjf-f5m7
reference_type
scores
url https://github.com/advisories/GHSA-5hj3-vjjf-f5m7
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37672, GHSA-5hj3-vjjf-f5m7, PYSEC-2021-294, PYSEC-2021-585, PYSEC-2021-783
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3e9u-gag2-e3bn
9
url VCID-3y5w-424q-8qcn
vulnerability_id VCID-3y5w-424q-8qcn
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `Dequantize` does not fully validate the value of `axis` and can result in heap OOB accesses. The `axis` argument can be `-1` (the default value for the optional argument) or any other positive value at most the number of dimensions of the input. Unfortunately, the upper bound is not checked and this results in reading past the end of the array containing the dimensions of the input tensor. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-50.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-50.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-105.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-105.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/dequantize_op.cc#L92-L153
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/dequantize_op.cc#L92-L153
4
reference_url https://github.com/tensorflow/tensorflow/commit/23968a8bf65b009120c43b5ebcceaf52dbc9e943
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/23968a8bf65b009120c43b5ebcceaf52dbc9e943
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-23hm-7w47-xw72
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-23hm-7w47-xw72
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21726
reference_id CVE-2022-21726
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21726
7
reference_url https://github.com/advisories/GHSA-23hm-7w47-xw72
reference_id GHSA-23hm-7w47-xw72
reference_type
scores
url https://github.com/advisories/GHSA-23hm-7w47-xw72
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21726, GHSA-23hm-7w47-xw72, PYSEC-2022-105, PYSEC-2022-50
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3y5w-424q-8qcn
10
url VCID-4de1-psyn-7kej
vulnerability_id VCID-4de1-psyn-7kej
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-589.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-589.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-787.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-787.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-298.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-298.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/578e634b4f1c1c684d4b4294f9e5281b2133b3ed
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/578e634b4f1c1c684d4b4294f9e5281b2133b3ed
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v768-w7m9-2vmm
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v768-w7m9-2vmm
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37676
reference_id CVE-2021-37676
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37676
8
reference_url https://github.com/advisories/GHSA-v768-w7m9-2vmm
reference_id GHSA-v768-w7m9-2vmm
reference_type
scores
url https://github.com/advisories/GHSA-v768-w7m9-2vmm
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37676, GHSA-v768-w7m9-2vmm, PYSEC-2021-298, PYSEC-2021-589, PYSEC-2021-787
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4de1-psyn-7kej
11
url VCID-4n1w-zfpr-dugh
vulnerability_id VCID-4n1w-zfpr-dugh
summary Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `IsSimplifiableReshape` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-90.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-90.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-145.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-145.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L1687-L1742
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L1687-L1742
4
reference_url https://github.com/tensorflow/tensorflow/commit/1fb27733f943295d874417630edd3b38b34ce082
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/1fb27733f943295d874417630edd3b38b34ce082
5
reference_url https://github.com/tensorflow/tensorflow/commit/240655511cd3e701155f944a972db71b6c0b1bb6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/240655511cd3e701155f944a972db71b6c0b1bb6
6
reference_url https://github.com/tensorflow/tensorflow/commit/ebc1a2ffe5a7573d905e99bd0ee3568ee07c12c1
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/ebc1a2ffe5a7573d905e99bd0ee3568ee07c12c1
7
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fq86-3f29-px2c
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fq86-3f29-px2c
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23581
reference_id CVE-2022-23581
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23581
9
reference_url https://github.com/advisories/GHSA-fq86-3f29-px2c
reference_id GHSA-fq86-3f29-px2c
reference_type
scores
url https://github.com/advisories/GHSA-fq86-3f29-px2c
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23581, GHSA-fq86-3f29-px2c, PYSEC-2022-145, PYSEC-2022-90
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4n1w-zfpr-dugh
12
url VCID-56kw-66kj-1kb7
vulnerability_id VCID-56kw-66kj-1kb7
summary Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial of service via assertion failure by altering a `SavedModel` on disk such that `AttrDef`s of some operation are duplicated. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-74.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-74.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-129.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-129.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/commit/c2b31ff2d3151acb230edc3f5b1832d2c713a9e0
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/c2b31ff2d3151acb230edc3f5b1832d2c713a9e0
4
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4v5p-v5h9-6xjx
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4v5p-v5h9-6xjx
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23565
reference_id CVE-2022-23565
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23565
6
reference_url https://github.com/advisories/GHSA-4v5p-v5h9-6xjx
reference_id GHSA-4v5p-v5h9-6xjx
reference_type
scores
url https://github.com/advisories/GHSA-4v5p-v5h9-6xjx
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23565, GHSA-4v5p-v5h9-6xjx, PYSEC-2022-129, PYSEC-2022-74
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-56kw-66kj-1kb7
13
url VCID-5781-vzmv-rkg4
vulnerability_id VCID-5781-vzmv-rkg4
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-611.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-611.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-809.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-809.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-394.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-394.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/f09caa532b6e1ac8d2aa61b7832c78c5b79300c6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/f09caa532b6e1ac8d2aa61b7832c78c5b79300c6
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j86v-p27c-73fm
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j86v-p27c-73fm
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41201
reference_id CVE-2021-41201
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41201
8
reference_url https://github.com/advisories/GHSA-j86v-p27c-73fm
reference_id GHSA-j86v-p27c-73fm
reference_type
scores
url https://github.com/advisories/GHSA-j86v-p27c-73fm
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41201, GHSA-j86v-p27c-73fm, PYSEC-2021-394, PYSEC-2021-611, PYSEC-2021-809
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5781-vzmv-rkg4
14
url VCID-5j3t-baqf-dbhs
vulnerability_id VCID-5j3t-baqf-dbhs
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-844.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-844.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-846.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-846.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-842.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-842.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/e9c81c1e1a9cd8dd31f4e83676cab61b60658429
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e9c81c1e1a9cd8dd31f4e83676cab61b60658429
5
reference_url https://github.com/tensorflow/tensorflow/issues/46888
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/issues/46888
6
reference_url https://github.com/tensorflow/tensorflow/pull/51733
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/pull/51733
7
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cq76-mxrc-vchh
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cq76-mxrc-vchh
8
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41195
reference_id CVE-2021-41195
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41195
10
reference_url https://github.com/advisories/GHSA-cq76-mxrc-vchh
reference_id GHSA-cq76-mxrc-vchh
reference_type
scores
url https://github.com/advisories/GHSA-cq76-mxrc-vchh
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
aliases CVE-2021-41195, GHSA-cq76-mxrc-vchh, PYSEC-2021-842, PYSEC-2021-844, PYSEC-2021-846
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5j3t-baqf-dbhs
15
url VCID-5ke1-vz5z-qubj
vulnerability_id VCID-5ke1-vz5z-qubj
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-568.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-568.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-766.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-766.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-277.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-277.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/01cff3f986259d661103412a20745928c727326f
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/01cff3f986259d661103412a20745928c727326f
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7fvx-3jfc-2cpc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7fvx-3jfc-2cpc
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37655
reference_id CVE-2021-37655
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37655
8
reference_url https://github.com/advisories/GHSA-7fvx-3jfc-2cpc
reference_id GHSA-7fvx-3jfc-2cpc
reference_type
scores
url https://github.com/advisories/GHSA-7fvx-3jfc-2cpc
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37655, GHSA-7fvx-3jfc-2cpc, PYSEC-2021-277, PYSEC-2021-568, PYSEC-2021-766
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5ke1-vz5z-qubj
16
url VCID-5m82-fmvp-4qd1
vulnerability_id VCID-5m82-fmvp-4qd1
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-580.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-580.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-778.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-778.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-289.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-289.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/2e0ee46f1a47675152d3d865797a18358881d7a6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/2e0ee46f1a47675152d3d865797a18358881d7a6
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w74j-v8xh-3w5h
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w74j-v8xh-3w5h
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37667
reference_id CVE-2021-37667
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37667
8
reference_url https://github.com/advisories/GHSA-w74j-v8xh-3w5h
reference_id GHSA-w74j-v8xh-3w5h
reference_type
scores
url https://github.com/advisories/GHSA-w74j-v8xh-3w5h
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37667, GHSA-w74j-v8xh-3w5h, PYSEC-2021-289, PYSEC-2021-580, PYSEC-2021-778
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5m82-fmvp-4qd1
17
url VCID-65fu-yg2h-zycr
vulnerability_id VCID-65fu-yg2h-zycr
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `AssignOp` can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized (to minimize number of allocations), but does not check that the right hand side is also initialized. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-82.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-82.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-137.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-137.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/assign_op.h#L30-L143
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/assign_op.h#L30-L143
4
reference_url https://github.com/tensorflow/tensorflow/commit/ef1d027be116f25e25bb94a60da491c2cf55bd0b
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/ef1d027be116f25e25bb94a60da491c2cf55bd0b
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q85f-69q7-55h2
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q85f-69q7-55h2
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23573
reference_id CVE-2022-23573
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23573
7
reference_url https://github.com/advisories/GHSA-q85f-69q7-55h2
reference_id GHSA-q85f-69q7-55h2
reference_type
scores
url https://github.com/advisories/GHSA-q85f-69q7-55h2
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23573, GHSA-q85f-69q7-55h2, PYSEC-2022-137, PYSEC-2022-82
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-65fu-yg2h-zycr
18
url VCID-67ks-3hd1-8fff
vulnerability_id VCID-67ks-3hd1-8fff
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-561.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-561.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-759.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-759.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-270.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-270.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/9728c60e136912a12d99ca56e106b7cce7af5986
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/9728c60e136912a12d99ca56e106b7cce7af5986
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wp77-4gmm-7cq8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wp77-4gmm-7cq8
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37648
reference_id CVE-2021-37648
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37648
8
reference_url https://github.com/advisories/GHSA-wp77-4gmm-7cq8
reference_id GHSA-wp77-4gmm-7cq8
reference_type
scores
url https://github.com/advisories/GHSA-wp77-4gmm-7cq8
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37648, GHSA-wp77-4gmm-7cq8, PYSEC-2021-270, PYSEC-2021-561, PYSEC-2021-759
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-67ks-3hd1-8fff
19
url VCID-68ym-s45d-8bhk
vulnerability_id VCID-68ym-s45d-8bhk
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-634.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-634.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-832.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-832.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-417.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-417.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/68867bf01239d9e1048f98cbad185bf4761bedd3
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/68867bf01239d9e1048f98cbad185bf4761bedd3
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7r94-xv9v-63jw
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7r94-xv9v-63jw
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41225
reference_id CVE-2021-41225
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41225
8
reference_url https://github.com/advisories/GHSA-7r94-xv9v-63jw
reference_id GHSA-7r94-xv9v-63jw
reference_type
scores
url https://github.com/advisories/GHSA-7r94-xv9v-63jw
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41225, GHSA-7r94-xv9v-63jw, PYSEC-2021-417, PYSEC-2021-634, PYSEC-2021-832
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-68ym-s45d-8bhk
20
url VCID-6bgf-h7cu-27ec
vulnerability_id VCID-6bgf-h7cu-27ec
summary Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operations. Both `embedding_size` and `lookup_size` are products of values provided by the user. Hence, a malicious user could trigger overflows in the multiplication. In certain scenarios, this can then result in heap OOB read/write. Users are advised to upgrade to a patched version.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-68.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-68.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-123.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-123.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/kernels/embedding_lookup_sparse.cc#L179-L189
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/kernels/embedding_lookup_sparse.cc#L179-L189
4
reference_url https://github.com/tensorflow/tensorflow/commit/1de49725a5fc4e48f1a3b902ec3599ee99283043
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/1de49725a5fc4e48f1a3b902ec3599ee99283043
5
reference_url https://github.com/tensorflow/tensorflow/commit/a4e401da71458d253b05e41f28637b65baf64be4
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/a4e401da71458d253b05e41f28637b65baf64be4
6
reference_url https://github.com/tensorflow/tensorflow/commit/f19be71717c497723ba0cea0379e84f061a75e01
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/f19be71717c497723ba0cea0379e84f061a75e01
7
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-98p5-x8x4-c9m5
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-98p5-x8x4-c9m5
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23559
reference_id CVE-2022-23559
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23559
9
reference_url https://github.com/advisories/GHSA-98p5-x8x4-c9m5
reference_id GHSA-98p5-x8x4-c9m5
reference_type
scores
url https://github.com/advisories/GHSA-98p5-x8x4-c9m5
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23559, GHSA-98p5-x8x4-c9m5, PYSEC-2022-123, PYSEC-2022-68
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6bgf-h7cu-27ec
21
url VCID-6j49-ccph-uqht
vulnerability_id VCID-6j49-ccph-uqht
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-566.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-566.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-764.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-764.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-275.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-275.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/ac117ee8a8ea57b73d34665cdf00ef3303bc0b11
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/ac117ee8a8ea57b73d34665cdf00ef3303bc0b11
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qjj8-32p7-h289
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qjj8-32p7-h289
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37653
reference_id CVE-2021-37653
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37653
8
reference_url https://github.com/advisories/GHSA-qjj8-32p7-h289
reference_id GHSA-qjj8-32p7-h289
reference_type
scores
url https://github.com/advisories/GHSA-qjj8-32p7-h289
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37653, GHSA-qjj8-32p7-h289, PYSEC-2021-275, PYSEC-2021-566, PYSEC-2021-764
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6j49-ccph-uqht
22
url VCID-6jvw-p6me-mke6
vulnerability_id VCID-6jvw-p6me-mke6
summary Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `SafeToRemoveIdentity` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-88.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-88.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-143.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-143.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/dependency_optimizer.cc#L59-L98
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/dependency_optimizer.cc#L59-L98
4
reference_url https://github.com/tensorflow/tensorflow/commit/92dba16749fae36c246bec3f9ba474d9ddeb7662
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/92dba16749fae36c246bec3f9ba474d9ddeb7662
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5f2r-qp73-37mr
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5f2r-qp73-37mr
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23579
reference_id CVE-2022-23579
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23579
7
reference_url https://github.com/advisories/GHSA-5f2r-qp73-37mr
reference_id GHSA-5f2r-qp73-37mr
reference_type
scores
url https://github.com/advisories/GHSA-5f2r-qp73-37mr
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23579, GHSA-5f2r-qp73-37mr, PYSEC-2022-143, PYSEC-2022-88
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6jvw-p6me-mke6
23
url VCID-6nby-ppgb-e3f7
vulnerability_id VCID-6nby-ppgb-e3f7
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-569.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-569.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-767.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-767.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-278.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-278.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/1071f554dbd09f7e101324d366eec5f4fe5a3ece
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/1071f554dbd09f7e101324d366eec5f4fe5a3ece
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4xfp-4pfp-89wg
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4xfp-4pfp-89wg
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37656
reference_id CVE-2021-37656
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37656
8
reference_url https://github.com/advisories/GHSA-4xfp-4pfp-89wg
reference_id GHSA-4xfp-4pfp-89wg
reference_type
scores
url https://github.com/advisories/GHSA-4xfp-4pfp-89wg
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37656, GHSA-4xfp-4pfp-89wg, PYSEC-2021-278, PYSEC-2021-569, PYSEC-2021-767
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6nby-ppgb-e3f7
24
url VCID-6nfa-78eb-jffv
vulnerability_id VCID-6nfa-78eb-jffv
summary Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow can trigger a null pointer dereference. There are 2 places where this can occur, for the same malicious alteration of a `SavedModel` file (fixing the first one would trigger the same dereference in the second place). First, during constant folding, the `GraphDef` might not have the required nodes for the binary operation. If a node is missing, the correposning `mul_*child` would be null, and the dereference in the subsequent line would be incorrect. We have a similar issue during `IsIdentityConsumingSwitch`. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-98.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-98.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-153.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-153.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/mutable_graph_view.cc#L59-L74
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/mutable_graph_view.cc#L59-L74
4
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L3466-L3497
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L3466-L3497
5
reference_url https://github.com/tensorflow/tensorflow/commit/045deec1cbdebb27d817008ad5df94d96a08b1bf
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/045deec1cbdebb27d817008ad5df94d96a08b1bf
6
reference_url https://github.com/tensorflow/tensorflow/commit/0a365c029e437be0349c31f8d4c9926b69fa3fa1
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/0a365c029e437be0349c31f8d4c9926b69fa3fa1
7
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9px9-73fg-3fqp
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9px9-73fg-3fqp
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23589
reference_id CVE-2022-23589
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23589
9
reference_url https://github.com/advisories/GHSA-9px9-73fg-3fqp
reference_id GHSA-9px9-73fg-3fqp
reference_type
scores
url https://github.com/advisories/GHSA-9px9-73fg-3fqp
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23589, GHSA-9px9-73fg-3fqp, PYSEC-2022-153, PYSEC-2022-98
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6nfa-78eb-jffv
25
url VCID-6set-8e9p-nyeu
vulnerability_id VCID-6set-8e9p-nyeu
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalMaxPool` can be made to crash a TensorFlow process via a division by 0. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-59.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-59.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-114.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-114.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/fractional_max_pool_op.cc#L36-L192
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/fractional_max_pool_op.cc#L36-L192
4
reference_url https://github.com/tensorflow/tensorflow/commit/ba4e8ac4dc2991e350d5cc407f8598c8d4ee70fb
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/ba4e8ac4dc2991e350d5cc407f8598c8d4ee70fb
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-87v6-crgm-2gfj
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-87v6-crgm-2gfj
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21735
reference_id CVE-2022-21735
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21735
7
reference_url https://github.com/advisories/GHSA-87v6-crgm-2gfj
reference_id GHSA-87v6-crgm-2gfj
reference_type
scores
url https://github.com/advisories/GHSA-87v6-crgm-2gfj
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21735, GHSA-87v6-crgm-2gfj, PYSEC-2022-114, PYSEC-2022-59
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6set-8e9p-nyeu
26
url VCID-6wh3-uhcu-jqef
vulnerability_id VCID-6wh3-uhcu-jqef
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-606.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-606.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-804.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-804.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-389.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-389.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/12b1ff82b3f26ff8de17e58703231d5a02ef1b8b
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/12b1ff82b3f26ff8de17e58703231d5a02ef1b8b
5
reference_url https://github.com/tensorflow/tensorflow/issues/51936
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/issues/51936
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m539-j985-hcr8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m539-j985-hcr8
7
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41196
reference_id CVE-2021-41196
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41196
9
reference_url https://github.com/advisories/GHSA-m539-j985-hcr8
reference_id GHSA-m539-j985-hcr8
reference_type
scores
url https://github.com/advisories/GHSA-m539-j985-hcr8
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41196, GHSA-m539-j985-hcr8, PYSEC-2021-389, PYSEC-2021-606, PYSEC-2021-804
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6wh3-uhcu-jqef
27
url VCID-6xhv-euz8-zkc8
vulnerability_id VCID-6xhv-euz8-zkc8
summary Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a use after free behavior when decoding PNG images. After `png::CommonFreeDecode(&decode)` gets called, the values of `decode.width` and `decode.height` are in an unspecified state. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-93.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-93.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-148.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-148.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/image/decode_image_op.cc#L339-L346
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/image/decode_image_op.cc#L339-L346
4
reference_url https://github.com/tensorflow/tensorflow/commit/e746adbfcfee15e9cfdb391ff746c765b99bdf9b
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e746adbfcfee15e9cfdb391ff746c765b99bdf9b
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-24x4-6qmh-88qg
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-24x4-6qmh-88qg
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23584
reference_id CVE-2022-23584
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23584
7
reference_url https://github.com/advisories/GHSA-24x4-6qmh-88qg
reference_id GHSA-24x4-6qmh-88qg
reference_type
scores
url https://github.com/advisories/GHSA-24x4-6qmh-88qg
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23584, GHSA-24x4-6qmh-88qg, PYSEC-2022-148, PYSEC-2022-93
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6xhv-euz8-zkc8
28
url VCID-6yd6-npyx-93cx
vulnerability_id VCID-6yd6-npyx-93cx
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-616.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-616.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-814.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-814.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-399.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-399.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/inplace_ops.cc#L72-L97
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/inplace_ops.cc#L72-L97
5
reference_url https://github.com/tensorflow/tensorflow/commit/9de11bdc2cf1284b2f635419bd3e6bbc7643eb2c
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/9de11bdc2cf1284b2f635419bd3e6bbc7643eb2c
6
reference_url https://github.com/tensorflow/tensorflow/commit/d11f21bbdfa54f3576ae860fc927bf23c675ebc0
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/d11f21bbdfa54f3576ae860fc927bf23c675ebc0
7
reference_url https://github.com/tensorflow/tensorflow/commit/e67caccea81167402c62977b5c521f2a8b261d6a
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e67caccea81167402c62977b5c521f2a8b261d6a
8
reference_url https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235
9
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7v94-64hj-m82h
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7v94-64hj-m82h
10
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41207
reference_id CVE-2021-41207
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41207
12
reference_url https://github.com/advisories/GHSA-7v94-64hj-m82h
reference_id GHSA-7v94-64hj-m82h
reference_type
scores
url https://github.com/advisories/GHSA-7v94-64hj-m82h
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41207, GHSA-7v94-64hj-m82h, PYSEC-2021-399, PYSEC-2021-616, PYSEC-2021-814
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6yd6-npyx-93cx
29
url VCID-76t8-h98v-buhf
vulnerability_id VCID-76t8-h98v-buhf
summary Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments, if the tensors have an invalid `dtype` and 0 elements or an invalid shape. This allows attackers to cause denial of services in TensorFlow processes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-80.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-80.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-135.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-135.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/commit/5b491cd5e41ad63735161cec9c2a568172c8b6a3
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/5b491cd5e41ad63735161cec9c2a568172c8b6a3
4
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j3mj-fhpq-qqjj
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j3mj-fhpq-qqjj
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23571
reference_id CVE-2022-23571
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23571
6
reference_url https://github.com/advisories/GHSA-j3mj-fhpq-qqjj
reference_id GHSA-j3mj-fhpq-qqjj
reference_type
scores
url https://github.com/advisories/GHSA-j3mj-fhpq-qqjj
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23571, GHSA-j3mj-fhpq-qqjj, PYSEC-2022-135, PYSEC-2022-80
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-76t8-h98v-buhf
30
url VCID-77ap-cbge-vfam
vulnerability_id VCID-77ap-cbge-vfam
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-560.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-560.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-758.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-758.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-269.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-269.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/02cc160e29d20631de3859c6653184e3f876b9d7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/02cc160e29d20631de3859c6653184e3f876b9d7
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c5x2-p679-95wc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c5x2-p679-95wc
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37647
reference_id CVE-2021-37647
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37647
8
reference_url https://github.com/advisories/GHSA-c5x2-p679-95wc
reference_id GHSA-c5x2-p679-95wc
reference_type
scores
url https://github.com/advisories/GHSA-c5x2-p679-95wc
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37647, GHSA-c5x2-p679-95wc, PYSEC-2021-269, PYSEC-2021-560, PYSEC-2021-758
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-77ap-cbge-vfam
31
url VCID-799s-fus4-nygx
vulnerability_id VCID-799s-fus4-nygx
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-553.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-553.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-751.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-751.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-262.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-262.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/4923de56ec94fff7770df259ab7f2288a74feb41
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/4923de56ec94fff7770df259ab7f2288a74feb41
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-95xm-g58g-3p88
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-95xm-g58g-3p88
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37640
reference_id CVE-2021-37640
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37640
8
reference_url https://github.com/advisories/GHSA-95xm-g58g-3p88
reference_id GHSA-95xm-g58g-3p88
reference_type
scores
url https://github.com/advisories/GHSA-95xm-g58g-3p88
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37640, GHSA-95xm-g58g-3p88, PYSEC-2021-262, PYSEC-2021-553, PYSEC-2021-751
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-799s-fus4-nygx
32
url VCID-7avd-xuag-ybbv
vulnerability_id VCID-7avd-xuag-ybbv
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-624.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-624.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-822.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-822.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-407.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-407.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/d3738dd70f1c9ceb547258cbb82d853da8771850
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/d3738dd70f1c9ceb547258cbb82d853da8771850
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x3v8-c8qx-3j3r
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x3v8-c8qx-3j3r
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41215
reference_id CVE-2021-41215
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41215
8
reference_url https://github.com/advisories/GHSA-x3v8-c8qx-3j3r
reference_id GHSA-x3v8-c8qx-3j3r
reference_type
scores
url https://github.com/advisories/GHSA-x3v8-c8qx-3j3r
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41215, GHSA-x3v8-c8qx-3j3r, PYSEC-2021-407, PYSEC-2021-624, PYSEC-2021-822
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7avd-xuag-ybbv
33
url VCID-7gat-e8qw-e7hd
vulnerability_id VCID-7gat-e8qw-e7hd
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-619.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-619.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-817.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-817.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-402.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-402.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/701cfaca222a82afbeeb17496bd718baa65a67d2
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/701cfaca222a82afbeeb17496bd718baa65a67d2
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m342-ff57-4jcc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m342-ff57-4jcc
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41210
reference_id CVE-2021-41210
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41210
8
reference_url https://github.com/advisories/GHSA-m342-ff57-4jcc
reference_id GHSA-m342-ff57-4jcc
reference_type
scores
url https://github.com/advisories/GHSA-m342-ff57-4jcc
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41210, GHSA-m342-ff57-4jcc, PYSEC-2021-402, PYSEC-2021-619, PYSEC-2021-817
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7gat-e8qw-e7hd
34
url VCID-7jup-pyyw-c3eg
vulnerability_id VCID-7jup-pyyw-c3eg
summary Tensorflow is an Open Source Machine Learning Framework. The implementations of `Sparse*Cwise*` ops are vulnerable to integer overflows. These can be used to trigger large allocations (so, OOM based denial of service) or `CHECK`-fails when building new `TensorShape` objects (so, assert failures based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large `TensorShape` with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-76.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-76.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-131.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-131.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_dense_binary_op_shared.cc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_dense_binary_op_shared.cc
4
reference_url https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md
5
reference_url https://github.com/tensorflow/tensorflow/commit/1b54cadd19391b60b6fcccd8d076426f7221d5e8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/1b54cadd19391b60b6fcccd8d076426f7221d5e8
6
reference_url https://github.com/tensorflow/tensorflow/commit/e952a89b7026b98fe8cbe626514a93ed68b7c510
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e952a89b7026b98fe8cbe626514a93ed68b7c510
7
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rrx2-r989-2c43
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rrx2-r989-2c43
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23567
reference_id CVE-2022-23567
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23567
9
reference_url https://github.com/advisories/GHSA-rrx2-r989-2c43
reference_id GHSA-rrx2-r989-2c43
reference_type
scores
url https://github.com/advisories/GHSA-rrx2-r989-2c43
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23567, GHSA-rrx2-r989-2c43, PYSEC-2022-131, PYSEC-2022-76
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7jup-pyyw-c3eg
35
url VCID-7rgb-m55r-4yhr
vulnerability_id VCID-7rgb-m55r-4yhr
summary Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-96.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-96.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-151.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-151.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L2621-L2689
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L2621-L2689
4
reference_url https://github.com/tensorflow/tensorflow/commit/0aaaae6eca5a7175a193696383f582f53adab23f
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/0aaaae6eca5a7175a193696383f582f53adab23f
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8jj7-5vxc-pg2q
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8jj7-5vxc-pg2q
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23587
reference_id CVE-2022-23587
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23587
7
reference_url https://github.com/advisories/GHSA-8jj7-5vxc-pg2q
reference_id GHSA-8jj7-5vxc-pg2q
reference_type
scores
url https://github.com/advisories/GHSA-8jj7-5vxc-pg2q
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23587, GHSA-8jj7-5vxc-pg2q, PYSEC-2022-151, PYSEC-2022-96
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7rgb-m55r-4yhr
36
url VCID-7z58-8eek-3fg2
vulnerability_id VCID-7z58-8eek-3fg2
summary Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would allow limited reads and writes outside of arrays in TFLite. This exploits missing validation in the conversion from sparse tensors to dense tensors. The fix is included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. Users are advised to upgrade as soon as possible.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-69.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-69.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-124.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-124.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/kernels/internal/utils/sparsity_format_converter.cc#L252-L293
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/kernels/internal/utils/sparsity_format_converter.cc#L252-L293
4
reference_url https://github.com/tensorflow/tensorflow/commit/6364463d6f5b6254cac3d6aedf999b6a96225038
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/6364463d6f5b6254cac3d6aedf999b6a96225038
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4hvf-hxvg-f67v
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4hvf-hxvg-f67v
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23560
reference_id CVE-2022-23560
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23560
7
reference_url https://github.com/advisories/GHSA-4hvf-hxvg-f67v
reference_id GHSA-4hvf-hxvg-f67v
reference_type
scores
url https://github.com/advisories/GHSA-4hvf-hxvg-f67v
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23560, GHSA-4hvf-hxvg-f67v, PYSEC-2022-124, PYSEC-2022-69
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7z58-8eek-3fg2
37
url VCID-85jp-mtkt-6kb1
vulnerability_id VCID-85jp-mtkt-6kb1
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-623.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-623.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-821.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-821.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-406.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-406.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vwhq-49r4-gj9v
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vwhq-49r4-gj9v
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41214
reference_id CVE-2021-41214
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41214
8
reference_url https://github.com/advisories/GHSA-vwhq-49r4-gj9v
reference_id GHSA-vwhq-49r4-gj9v
reference_type
scores
url https://github.com/advisories/GHSA-vwhq-49r4-gj9v
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41214, GHSA-vwhq-49r4-gj9v, PYSEC-2021-406, PYSEC-2021-623, PYSEC-2021-821
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-85jp-mtkt-6kb1
38
url VCID-87r3-u8t5-m7d2
vulnerability_id VCID-87r3-u8t5-m7d2
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `UnravelIndex` is vulnerable to a division by zero caused by an integer overflow bug. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-53.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-53.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-108.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-108.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/unravel_index_op.cc#L36-L135
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/unravel_index_op.cc#L36-L135
4
reference_url https://github.com/tensorflow/tensorflow/commit/58b34c6c8250983948b5a781b426f6aa01fd47af
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/58b34c6c8250983948b5a781b426f6aa01fd47af
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-34f9-hjfq-rr8j
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-34f9-hjfq-rr8j
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21729
reference_id CVE-2022-21729
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21729
7
reference_url https://github.com/advisories/GHSA-34f9-hjfq-rr8j
reference_id GHSA-34f9-hjfq-rr8j
reference_type
scores
url https://github.com/advisories/GHSA-34f9-hjfq-rr8j
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21729, GHSA-34f9-hjfq-rr8j, PYSEC-2022-108, PYSEC-2022-53
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-87r3-u8t5-m7d2
39
url VCID-8b1b-hevb-cqht
vulnerability_id VCID-8b1b-hevb-cqht
summary Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that Grappler optimizer would attempt to build a tensor using a reference `dtype`. This would result in a crash due to a `CHECK`-fail in the `Tensor` constructor as reference types are not allowed. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-97.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-97.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-152.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-152.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/tensor.cc#L733-L781
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/tensor.cc#L733-L781
4
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L1328-L1402
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L1328-L1402
5
reference_url https://github.com/tensorflow/tensorflow/commit/6b5adc0877de832b2a7c189532dbbbc64622eeb6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/6b5adc0877de832b2a7c189532dbbbc64622eeb6
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fx5c-h9f6-rv7c
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fx5c-h9f6-rv7c
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23588
reference_id CVE-2022-23588
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23588
8
reference_url https://github.com/advisories/GHSA-fx5c-h9f6-rv7c
reference_id GHSA-fx5c-h9f6-rv7c
reference_type
scores
url https://github.com/advisories/GHSA-fx5c-h9f6-rv7c
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23588, GHSA-fx5c-h9f6-rv7c, PYSEC-2022-152, PYSEC-2022-97
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8b1b-hevb-cqht
40
url VCID-8bz4-tb8u-ckdy
vulnerability_id VCID-8bz4-tb8u-ckdy
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-612.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-612.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-810.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-810.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-395.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-395.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/1b0e0ec27e7895b9985076eab32445026ae5ca94
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/1b0e0ec27e7895b9985076eab32445026ae5ca94
5
reference_url https://github.com/tensorflow/tensorflow/commit/6d94002a09711d297dbba90390d5482b76113899
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/6d94002a09711d297dbba90390d5482b76113899
6
reference_url https://github.com/tensorflow/tensorflow/issues/46889
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/issues/46889
7
reference_url https://github.com/tensorflow/tensorflow/issues/46912
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/issues/46912
8
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xrqm-fpgr-6hhx
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xrqm-fpgr-6hhx
9
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41202
reference_id CVE-2021-41202
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41202
11
reference_url https://github.com/advisories/GHSA-xrqm-fpgr-6hhx
reference_id GHSA-xrqm-fpgr-6hhx
reference_type
scores
url https://github.com/advisories/GHSA-xrqm-fpgr-6hhx
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41202, GHSA-xrqm-fpgr-6hhx, PYSEC-2021-395, PYSEC-2021-612, PYSEC-2021-810
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8bz4-tb8u-ckdy
41
url VCID-8zuz-d9cs-kudv
vulnerability_id VCID-8zuz-d9cs-kudv
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-597.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-597.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-795.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-795.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-306.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-306.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q7f7-544h-67h9
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q7f7-544h-67h9
5
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37684
reference_id CVE-2021-37684
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37684
7
reference_url https://github.com/advisories/GHSA-q7f7-544h-67h9
reference_id GHSA-q7f7-544h-67h9
reference_type
scores
url https://github.com/advisories/GHSA-q7f7-544h-67h9
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37684, GHSA-q7f7-544h-67h9, PYSEC-2021-306, PYSEC-2021-597, PYSEC-2021-795
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8zuz-d9cs-kudv
42
url VCID-9z61-fqek-cyfd
vulnerability_id VCID-9z61-fqek-cyfd
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-588.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-588.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-786.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-786.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-297.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-297.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/8a793b5d7f59e37ac7f3cd0954a750a2fe76bad4
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/8a793b5d7f59e37ac7f3cd0954a750a2fe76bad4
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c8h-2mv3-49ww
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c8h-2mv3-49ww
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37675
reference_id CVE-2021-37675
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37675
8
reference_url https://github.com/advisories/GHSA-9c8h-2mv3-49ww
reference_id GHSA-9c8h-2mv3-49ww
reference_type
scores
url https://github.com/advisories/GHSA-9c8h-2mv3-49ww
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37675, GHSA-9c8h-2mv3-49ww, PYSEC-2021-297, PYSEC-2021-588, PYSEC-2021-786
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9z61-fqek-cyfd
43
url VCID-af9s-d9qq-tuh7
vulnerability_id VCID-af9s-d9qq-tuh7
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `AddManySparseToTensorsMap` is vulnerable to an integer overflow which results in a `CHECK`-fail when building new `TensorShape` objects (so, an assert failure based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large `TensorShape` with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-77.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-77.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-132.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-132.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_tensors_map_ops.cc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_tensors_map_ops.cc
4
reference_url https://github.com/tensorflow/tensorflow/commit/a68f68061e263a88321c104a6c911fe5598050a8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/a68f68061e263a88321c104a6c911fe5598050a8
5
reference_url https://github.com/tensorflow/tensorflow/commit/b51b82fe65ebace4475e3c54eb089c18a4403f1c
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/b51b82fe65ebace4475e3c54eb089c18a4403f1c
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6445-fm66-fvq2
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6445-fm66-fvq2
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23568
reference_id CVE-2022-23568
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23568
8
reference_url https://github.com/advisories/GHSA-6445-fm66-fvq2
reference_id GHSA-6445-fm66-fvq2
reference_type
scores
url https://github.com/advisories/GHSA-6445-fm66-fvq2
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23568, GHSA-6445-fm66-fvq2, PYSEC-2022-132, PYSEC-2022-77
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-af9s-d9qq-tuh7
44
url VCID-at48-mrdj-a3en
vulnerability_id VCID-at48-mrdj-a3en
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-635.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-635.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-833.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-833.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-418.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-418.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/f410212e373eb2aec4c9e60bf3702eba99a38aba
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/f410212e373eb2aec4c9e60bf3702eba99a38aba
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-374m-jm66-3vj8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-374m-jm66-3vj8
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41226
reference_id CVE-2021-41226
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41226
8
reference_url https://github.com/advisories/GHSA-374m-jm66-3vj8
reference_id GHSA-374m-jm66-3vj8
reference_type
scores
url https://github.com/advisories/GHSA-374m-jm66-3vj8
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41226, GHSA-374m-jm66-3vj8, PYSEC-2021-418, PYSEC-2021-635, PYSEC-2021-833
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-at48-mrdj-a3en
45
url VCID-au3q-9qpz-pkgy
vulnerability_id VCID-au3q-9qpz-pkgy
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-632.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-632.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-830.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-830.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-415.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-415.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/aab9998916c2ffbd8f0592059fad352622f89cda
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/aab9998916c2ffbd8f0592059fad352622f89cda
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f54p-f6jp-4rhr
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f54p-f6jp-4rhr
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41223
reference_id CVE-2021-41223
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41223
8
reference_url https://github.com/advisories/GHSA-f54p-f6jp-4rhr
reference_id GHSA-f54p-f6jp-4rhr
reference_type
scores
url https://github.com/advisories/GHSA-f54p-f6jp-4rhr
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41223, GHSA-f54p-f6jp-4rhr, PYSEC-2021-415, PYSEC-2021-632, PYSEC-2021-830
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-au3q-9qpz-pkgy
46
url VCID-awrv-vnbj-3kg6
vulnerability_id VCID-awrv-vnbj-3kg6
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-575.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-575.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-773.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-773.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-284.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-284.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/429f009d2b2c09028647dd4bb7b3f6f414bbaad7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/429f009d2b2c09028647dd4bb7b3f6f414bbaad7
5
reference_url https://github.com/tensorflow/tensorflow/commit/9c87c32c710d0b5b53dc6fd3bfde4046e1f7a5ad
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/9c87c32c710d0b5b53dc6fd3bfde4046e1f7a5ad
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f5cx-5wr3-5qrc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f5cx-5wr3-5qrc
7
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37662
reference_id CVE-2021-37662
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37662
9
reference_url https://github.com/advisories/GHSA-f5cx-5wr3-5qrc
reference_id GHSA-f5cx-5wr3-5qrc
reference_type
scores
url https://github.com/advisories/GHSA-f5cx-5wr3-5qrc
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37662, GHSA-f5cx-5wr3-5qrc, PYSEC-2021-284, PYSEC-2021-575, PYSEC-2021-773
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-awrv-vnbj-3kg6
47
url VCID-b23t-3kmy-ubea
vulnerability_id VCID-b23t-3kmy-ubea
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-584.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-584.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-782.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-782.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-293.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-293.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/532f5c5a547126c634fefd43bbad1dc6417678ac
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/532f5c5a547126c634fefd43bbad1dc6417678ac
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qr82-2c78-4m8h
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qr82-2c78-4m8h
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37671
reference_id CVE-2021-37671
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37671
8
reference_url https://github.com/advisories/GHSA-qr82-2c78-4m8h
reference_id GHSA-qr82-2c78-4m8h
reference_type
scores
url https://github.com/advisories/GHSA-qr82-2c78-4m8h
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37671, GHSA-qr82-2c78-4m8h, PYSEC-2021-293, PYSEC-2021-584, PYSEC-2021-782
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b23t-3kmy-ubea
48
url VCID-bgt5-979r-auc5
vulnerability_id VCID-bgt5-979r-auc5
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-618.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-618.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-816.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-816.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-401.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-401.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hpv-v2rx-c5g6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hpv-v2rx-c5g6
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41209
reference_id CVE-2021-41209
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41209
8
reference_url https://github.com/advisories/GHSA-6hpv-v2rx-c5g6
reference_id GHSA-6hpv-v2rx-c5g6
reference_type
scores
url https://github.com/advisories/GHSA-6hpv-v2rx-c5g6
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41209, GHSA-6hpv-v2rx-c5g6, PYSEC-2021-401, PYSEC-2021-618, PYSEC-2021-816
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bgt5-979r-auc5
49
url VCID-bh5b-u3zt-puf9
vulnerability_id VCID-bh5b-u3zt-puf9
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-630.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-630.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-828.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-828.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-413.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-413.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/af5fcebb37c8b5d71c237f4e59c6477015c78ce6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/af5fcebb37c8b5d71c237f4e59c6477015c78ce6
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cqv6-3phm-hcwx
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cqv6-3phm-hcwx
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41221
reference_id CVE-2021-41221
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41221
8
reference_url https://github.com/advisories/GHSA-cqv6-3phm-hcwx
reference_id GHSA-cqv6-3phm-hcwx
reference_type
scores
url https://github.com/advisories/GHSA-cqv6-3phm-hcwx
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41221, GHSA-cqv6-3phm-hcwx, PYSEC-2021-413, PYSEC-2021-630, PYSEC-2021-828
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bh5b-u3zt-puf9
50
url VCID-bmvq-fjkr-2fc3
vulnerability_id VCID-bmvq-fjkr-2fc3
summary Tensorflow is an Open Source Machine Learning Framework. ### Impact An attacker can craft a TFLite model that would trigger a division by zero in the implementation of depthwise convolutions. The parameters of the convolution can be user controlled and are also used within a division operation to determine the size of the padding that needs to be added before applying the convolution. There is no check before this division that the divisor is strictly positive. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-65.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-65.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-120.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-120.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/lite/kernels/depthwise_conv.cc#L96
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/lite/kernels/depthwise_conv.cc#L96
4
reference_url https://github.com/tensorflow/tensorflow/commit/e5b0eec199c2d03de54fd6a7fd9275692218e2bc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e5b0eec199c2d03de54fd6a7fd9275692218e2bc
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-428x-9xc2-m8mj
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-428x-9xc2-m8mj
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21741
reference_id CVE-2022-21741
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21741
7
reference_url https://github.com/advisories/GHSA-428x-9xc2-m8mj
reference_id GHSA-428x-9xc2-m8mj
reference_type
scores
url https://github.com/advisories/GHSA-428x-9xc2-m8mj
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21741, GHSA-428x-9xc2-m8mj, PYSEC-2022-120, PYSEC-2022-65
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bmvq-fjkr-2fc3
51
url VCID-bnhj-ujmq-mqad
vulnerability_id VCID-bnhj-ujmq-mqad
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-549.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-549.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-747.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-747.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-258.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-258.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/d9204be9f49520cdaaeb2541d1dc5187b23f31d9
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/d9204be9f49520cdaaeb2541d1dc5187b23f31d9
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hp4c-x6r7-6555
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hp4c-x6r7-6555
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37636
reference_id CVE-2021-37636
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37636
8
reference_url https://github.com/advisories/GHSA-hp4c-x6r7-6555
reference_id GHSA-hp4c-x6r7-6555
reference_type
scores
url https://github.com/advisories/GHSA-hp4c-x6r7-6555
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37636, GHSA-hp4c-x6r7-6555, PYSEC-2021-258, PYSEC-2021-549, PYSEC-2021-747
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bnhj-ujmq-mqad
52
url VCID-bvuf-q5tx-x3ec
vulnerability_id VCID-bvuf-q5tx-x3ec
summary Tensorflow is an Open Source Machine Learning Framework. If a graph node is invalid, TensorFlow can leak memory in the implementation of `ImmutableExecutorState::Initialize`. Here, we set `item->kernel` to `nullptr` but it is a simple `OpKernel*` pointer so the memory that was previously allocated to it would leak. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-87.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-87.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-142.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-142.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/common_runtime/immutable_executor_state.cc#L84-L262
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/common_runtime/immutable_executor_state.cc#L84-L262
4
reference_url https://github.com/tensorflow/tensorflow/commit/c79ccba517dbb1a0ccb9b01ee3bd2a63748b60dd
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/c79ccba517dbb1a0ccb9b01ee3bd2a63748b60dd
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8r7c-3cm2-3h8f
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8r7c-3cm2-3h8f
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23578
reference_id CVE-2022-23578
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23578
7
reference_url https://github.com/advisories/GHSA-8r7c-3cm2-3h8f
reference_id GHSA-8r7c-3cm2-3h8f
reference_type
scores
url https://github.com/advisories/GHSA-8r7c-3cm2-3h8f
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23578, GHSA-8r7c-3cm2-3h8f, PYSEC-2022-142, PYSEC-2022-87
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bvuf-q5tx-x3ec
53
url VCID-c3wv-ty85-nqhc
vulnerability_id VCID-c3wv-ty85-nqhc
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-598.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-598.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-796.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-796.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-307.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-307.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/expand_dims.cc#L36-L50
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/expand_dims.cc#L36-L50
5
reference_url https://github.com/tensorflow/tensorflow/commit/d94ffe08a65400f898241c0374e9edc6fa8ed257
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/d94ffe08a65400f898241c0374e9edc6fa8ed257
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c545-c4f9-rf6v
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c545-c4f9-rf6v
7
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37685
reference_id CVE-2021-37685
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37685
9
reference_url https://github.com/advisories/GHSA-c545-c4f9-rf6v
reference_id GHSA-c545-c4f9-rf6v
reference_type
scores
url https://github.com/advisories/GHSA-c545-c4f9-rf6v
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37685, GHSA-c545-c4f9-rf6v, PYSEC-2021-307, PYSEC-2021-598, PYSEC-2021-796
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c3wv-ty85-nqhc
54
url VCID-c58x-wt2g-r7h4
vulnerability_id VCID-c58x-wt2g-r7h4
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-594.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-594.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-792.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-792.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-303.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-303.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/svdf.cc#L300-L313
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/svdf.cc#L300-L313
5
reference_url https://github.com/tensorflow/tensorflow/commit/5b048e87e4e55990dae6b547add4dae59f4e1c76
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/5b048e87e4e55990dae6b547add4dae59f4e1c76
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7xwj-5r4v-429p
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7xwj-5r4v-429p
7
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37681
reference_id CVE-2021-37681
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37681
9
reference_url https://github.com/advisories/GHSA-7xwj-5r4v-429p
reference_id GHSA-7xwj-5r4v-429p
reference_type
scores
url https://github.com/advisories/GHSA-7xwj-5r4v-429p
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37681, GHSA-7xwj-5r4v-429p, PYSEC-2021-303, PYSEC-2021-594, PYSEC-2021-792
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c58x-wt2g-r7h4
55
url VCID-c5wa-uqe8-yqh1
vulnerability_id VCID-c5wa-uqe8-yqh1
summary Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive under certain conditions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-70.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-70.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-125.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-125.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/commit/6c0b2b70eeee588591680f5b7d5d38175fd7cdf6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/6c0b2b70eeee588591680f5b7d5d38175fd7cdf6
4
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c78-vcq7-7vxq
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c78-vcq7-7vxq
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23561
reference_id CVE-2022-23561
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23561
6
reference_url https://github.com/advisories/GHSA-9c78-vcq7-7vxq
reference_id GHSA-9c78-vcq7-7vxq
reference_type
scores
url https://github.com/advisories/GHSA-9c78-vcq7-7vxq
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23561, GHSA-9c78-vcq7-7vxq, PYSEC-2022-125, PYSEC-2022-70
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c5wa-uqe8-yqh1
56
url VCID-cbgv-kvzc-gffm
vulnerability_id VCID-cbgv-kvzc-gffm
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-555.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-555.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-753.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-753.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-264.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-264.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/4aacb30888638da75023e6601149415b39763d76
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/4aacb30888638da75023e6601149415b39763d76
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-ch4f-829c-v5pw
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-ch4f-829c-v5pw
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37642
reference_id CVE-2021-37642
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37642
8
reference_url https://github.com/advisories/GHSA-ch4f-829c-v5pw
reference_id GHSA-ch4f-829c-v5pw
reference_type
scores
url https://github.com/advisories/GHSA-ch4f-829c-v5pw
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37642, GHSA-ch4f-829c-v5pw, PYSEC-2021-264, PYSEC-2021-555, PYSEC-2021-753
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cbgv-kvzc-gffm
57
url VCID-cejb-v628-1ffm
vulnerability_id VCID-cejb-v628-1ffm
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-558.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-558.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-756.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-756.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-267.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-267.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/96f364a1ca3009f98980021c4b32be5fdcca33a1
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/96f364a1ca3009f98980021c4b32be5fdcca33a1
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9w2p-5mgw-p94c
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9w2p-5mgw-p94c
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37645
reference_id CVE-2021-37645
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37645
8
reference_url https://github.com/advisories/GHSA-9w2p-5mgw-p94c
reference_id GHSA-9w2p-5mgw-p94c
reference_type
scores
url https://github.com/advisories/GHSA-9w2p-5mgw-p94c
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37645, GHSA-9w2p-5mgw-p94c, PYSEC-2021-267, PYSEC-2021-558, PYSEC-2021-756
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cejb-v628-1ffm
58
url VCID-cqub-cr1u-hfgq
vulnerability_id VCID-cqub-cr1u-hfgq
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-551.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-551.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-749.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-749.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-260.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-260.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/301ae88b331d37a2a16159b65b255f4f9eb39314
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/301ae88b331d37a2a16159b65b255f4f9eb39314
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hwr7-8gxx-fj5p
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hwr7-8gxx-fj5p
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37638
reference_id CVE-2021-37638
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37638
8
reference_url https://github.com/advisories/GHSA-hwr7-8gxx-fj5p
reference_id GHSA-hwr7-8gxx-fj5p
reference_type
scores
url https://github.com/advisories/GHSA-hwr7-8gxx-fj5p
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37638, GHSA-hwr7-8gxx-fj5p, PYSEC-2021-260, PYSEC-2021-551, PYSEC-2021-749
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cqub-cr1u-hfgq
59
url VCID-cswq-zynn-h7ct
vulnerability_id VCID-cswq-zynn-h7ct
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-626.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-626.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-824.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-824.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-409.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-409.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/05cbebd3c6bb8f517a158b0155debb8df79017ff
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/05cbebd3c6bb8f517a158b0155debb8df79017ff
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5crj-c72x-m7gq
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5crj-c72x-m7gq
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41217
reference_id CVE-2021-41217
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41217
8
reference_url https://github.com/advisories/GHSA-5crj-c72x-m7gq
reference_id GHSA-5crj-c72x-m7gq
reference_type
scores
url https://github.com/advisories/GHSA-5crj-c72x-m7gq
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41217, GHSA-5crj-c72x-m7gq, PYSEC-2021-409, PYSEC-2021-626, PYSEC-2021-824
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cswq-zynn-h7ct
60
url VCID-d3qq-2w3d-dqe8
vulnerability_id VCID-d3qq-2w3d-dqe8
summary Tensorflow is an Open Source Machine Learning Framework. During shape inference, TensorFlow can allocate a large vector based on a value from a tensor controlled by the user. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-89.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-89.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-144.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-144.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.cc#L788-L790
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.cc#L788-L790
4
reference_url https://github.com/tensorflow/tensorflow/commit/1361fb7e29449629e1df94d44e0427ebec8c83c7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/1361fb7e29449629e1df94d44e0427ebec8c83c7
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-627q-g293-49q7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-627q-g293-49q7
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23580
reference_id CVE-2022-23580
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23580
7
reference_url https://github.com/advisories/GHSA-627q-g293-49q7
reference_id GHSA-627q-g293-49q7
reference_type
scores
url https://github.com/advisories/GHSA-627q-g293-49q7
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23580, GHSA-627q-g293-49q7, PYSEC-2022-144, PYSEC-2022-89
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d3qq-2w3d-dqe8
61
url VCID-dcp4-adwb-efd7
vulnerability_id VCID-dcp4-adwb-efd7
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-608.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-608.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-806.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-806.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-391.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-391.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/9294094df6fea79271778eb7e7ae1bad8b5ef98f
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/9294094df6fea79271778eb7e7ae1bad8b5ef98f
5
reference_url https://github.com/tensorflow/tensorflow/issues/46911
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/issues/46911
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2p25-55c9-h58q
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2p25-55c9-h58q
7
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41198
reference_id CVE-2021-41198
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41198
9
reference_url https://github.com/advisories/GHSA-2p25-55c9-h58q
reference_id GHSA-2p25-55c9-h58q
reference_type
scores
url https://github.com/advisories/GHSA-2p25-55c9-h58q
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41198, GHSA-2p25-55c9-h58q, PYSEC-2021-391, PYSEC-2021-608, PYSEC-2021-806
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dcp4-adwb-efd7
62
url VCID-dkne-cc8g-qqfb
vulnerability_id VCID-dkne-cc8g-qqfb
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-577.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-577.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-775.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-775.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-286.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-286.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/e84c975313e8e8e38bb2ea118196369c45c51378
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e84c975313e8e8e38bb2ea118196369c45c51378
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r4c4-5fpq-56wg
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r4c4-5fpq-56wg
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37664
reference_id CVE-2021-37664
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37664
8
reference_url https://github.com/advisories/GHSA-r4c4-5fpq-56wg
reference_id GHSA-r4c4-5fpq-56wg
reference_type
scores
url https://github.com/advisories/GHSA-r4c4-5fpq-56wg
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37664, GHSA-r4c4-5fpq-56wg, PYSEC-2021-286, PYSEC-2021-577, PYSEC-2021-775
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dkne-cc8g-qqfb
63
url VCID-ep2z-xrdv-tyhh
vulnerability_id VCID-ep2z-xrdv-tyhh
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-559.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-559.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-757.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-757.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-268.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-268.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/c283e542a3f422420cfdb332414543b62fc4e4a5
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/c283e542a3f422420cfdb332414543b62fc4e4a5
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h6jh-7gv5-28vg
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h6jh-7gv5-28vg
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37646
reference_id CVE-2021-37646
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37646
8
reference_url https://github.com/advisories/GHSA-h6jh-7gv5-28vg
reference_id GHSA-h6jh-7gv5-28vg
reference_type
scores
url https://github.com/advisories/GHSA-h6jh-7gv5-28vg
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37646, GHSA-h6jh-7gv5-28vg, PYSEC-2021-268, PYSEC-2021-559, PYSEC-2021-757
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ep2z-xrdv-tyhh
64
url VCID-ewrz-th6a-augc
vulnerability_id VCID-ewrz-th6a-augc
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-564.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-564.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-762.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-762.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-273.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-273.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/0f931751fb20f565c4e94aa6df58d54a003cdb30
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/0f931751fb20f565c4e94aa6df58d54a003cdb30
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hpv4-7p9c-mvfr
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hpv4-7p9c-mvfr
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37651
reference_id CVE-2021-37651
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37651
8
reference_url https://github.com/advisories/GHSA-hpv4-7p9c-mvfr
reference_id GHSA-hpv4-7p9c-mvfr
reference_type
scores
url https://github.com/advisories/GHSA-hpv4-7p9c-mvfr
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37651, GHSA-hpv4-7p9c-mvfr, PYSEC-2021-273, PYSEC-2021-564, PYSEC-2021-762
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ewrz-th6a-augc
65
url VCID-f8h7-zfxn-wbaj
vulnerability_id VCID-f8h7-zfxn-wbaj
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-593.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-593.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-791.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-791.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-302.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-302.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/fully_connected.cc#L226
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/fully_connected.cc#L226
5
reference_url https://github.com/tensorflow/tensorflow/commit/718721986aa137691ee23f03638867151f74935f
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/718721986aa137691ee23f03638867151f74935f
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cfpj-3q4c-jhvr
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cfpj-3q4c-jhvr
7
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37680
reference_id CVE-2021-37680
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37680
9
reference_url https://github.com/advisories/GHSA-cfpj-3q4c-jhvr
reference_id GHSA-cfpj-3q4c-jhvr
reference_type
scores
url https://github.com/advisories/GHSA-cfpj-3q4c-jhvr
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37680, GHSA-cfpj-3q4c-jhvr, PYSEC-2021-302, PYSEC-2021-593, PYSEC-2021-791
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f8h7-zfxn-wbaj
66
url VCID-ffnh-y8v7-9yg7
vulnerability_id VCID-ffnh-y8v7-9yg7
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-636.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-636.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-834.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-834.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-419.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-419.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/1cb6bb6c2a6019417c9adaf9e6843ba75ee2580b
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/1cb6bb6c2a6019417c9adaf9e6843ba75ee2580b
5
reference_url https://github.com/tensorflow/tensorflow/commit/3712a2d3455e6ccb924daa5724a3652a86f6b585
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/3712a2d3455e6ccb924daa5724a3652a86f6b585
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j8c8-67vp-6mx7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j8c8-67vp-6mx7
7
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41227
reference_id CVE-2021-41227
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41227
9
reference_url https://github.com/advisories/GHSA-j8c8-67vp-6mx7
reference_id GHSA-j8c8-67vp-6mx7
reference_type
scores
url https://github.com/advisories/GHSA-j8c8-67vp-6mx7
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41227, GHSA-j8c8-67vp-6mx7, PYSEC-2021-419, PYSEC-2021-636, PYSEC-2021-834
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ffnh-y8v7-9yg7
67
url VCID-g3af-vhsj-sfbq
vulnerability_id VCID-g3af-vhsj-sfbq
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-567.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-567.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-765.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-765.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-276.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-276.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/bc9c546ce7015c57c2f15c168b3d9201de679a1d
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/bc9c546ce7015c57c2f15c168b3d9201de679a1d
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2r8p-fg3c-wcj4
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2r8p-fg3c-wcj4
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37654
reference_id CVE-2021-37654
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37654
8
reference_url https://github.com/advisories/GHSA-2r8p-fg3c-wcj4
reference_id GHSA-2r8p-fg3c-wcj4
reference_type
scores
url https://github.com/advisories/GHSA-2r8p-fg3c-wcj4
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37654, GHSA-2r8p-fg3c-wcj4, PYSEC-2021-276, PYSEC-2021-567, PYSEC-2021-765
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g3af-vhsj-sfbq
68
url VCID-g3tv-ra2y-hqdn
vulnerability_id VCID-g3tv-ra2y-hqdn
summary Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can be made to execute a division by 0. The function fails to check that the stride argument is strictly positive. Hence, the fix is to add a check for the stride argument to ensure it is valid. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-49.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-49.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-104.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-104.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/ffa202a17ab7a4a10182b746d230ea66f021fe16/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L189-L198
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/ffa202a17ab7a4a10182b746d230ea66f021fe16/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L189-L198
4
reference_url https://github.com/tensorflow/tensorflow/commit/3218043d6d3a019756607643cf65574fbfef5d7a
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/3218043d6d3a019756607643cf65574fbfef5d7a
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v3f7-j968-4h5f
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v3f7-j968-4h5f
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21725
reference_id CVE-2022-21725
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21725
7
reference_url https://github.com/advisories/GHSA-v3f7-j968-4h5f
reference_id GHSA-v3f7-j968-4h5f
reference_type
scores
url https://github.com/advisories/GHSA-v3f7-j968-4h5f
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21725, GHSA-v3f7-j968-4h5f, PYSEC-2022-104, PYSEC-2022-49
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g3tv-ra2y-hqdn
69
url VCID-g5tz-zaxw-cfa2
vulnerability_id VCID-g5tz-zaxw-cfa2
summary Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering a `StatusOr` value that is an error and forcibly extracting the value from it. We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-99.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-99.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-154.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-154.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L560-L567
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L560-L567
4
reference_url https://github.com/tensorflow/tensorflow/commit/955059813cc325dc1db5e2daa6221271406d4439
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/955059813cc325dc1db5e2daa6221271406d4439
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pqrv-8r2f-7278
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pqrv-8r2f-7278
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23590
reference_id CVE-2022-23590
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23590
7
reference_url https://github.com/advisories/GHSA-pqrv-8r2f-7278
reference_id GHSA-pqrv-8r2f-7278
reference_type
scores
url https://github.com/advisories/GHSA-pqrv-8r2f-7278
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23590, GHSA-pqrv-8r2f-7278, PYSEC-2022-154, PYSEC-2022-99
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g5tz-zaxw-cfa2
70
url VCID-g7mk-ddes-8fa8
vulnerability_id VCID-g7mk-ddes-8fa8
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `ThreadPoolHandle` can be used to trigger a denial of service attack by allocating too much memory. This is because the `num_threads` argument is only checked to not be negative, but there is no upper bound on its value. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-56.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-56.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-111.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-111.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/data/experimental/threadpool_dataset_op.cc#L79-L135
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/data/experimental/threadpool_dataset_op.cc#L79-L135
4
reference_url https://github.com/tensorflow/tensorflow/commit/e3749a6d5d1e8d11806d4a2e9cc3123d1a90b75e
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e3749a6d5d1e8d11806d4a2e9cc3123d1a90b75e
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c582-c96p-r5cq
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c582-c96p-r5cq
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21732
reference_id CVE-2022-21732
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21732
7
reference_url https://github.com/advisories/GHSA-c582-c96p-r5cq
reference_id GHSA-c582-c96p-r5cq
reference_type
scores
url https://github.com/advisories/GHSA-c582-c96p-r5cq
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21732, GHSA-c582-c96p-r5cq, PYSEC-2022-111, PYSEC-2022-56
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g7mk-ddes-8fa8
71
url VCID-gfss-uup9-vbcg
vulnerability_id VCID-gfss-uup9-vbcg
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-591.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-591.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-789.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-789.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-300.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-300.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/1df5a69e9f1a18a937e7907223066e606bf466b9
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/1df5a69e9f1a18a937e7907223066e606bf466b9
5
reference_url https://github.com/tensorflow/tensorflow/commit/23d6383eb6c14084a8fc3bdf164043b974818012
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/23d6383eb6c14084a8fc3bdf164043b974818012
6
reference_url https://github.com/tensorflow/tensorflow/commit/8e47a685785bef8f81bcb996048921dfde08a9ab
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/8e47a685785bef8f81bcb996048921dfde08a9ab
7
reference_url https://github.com/tensorflow/tensorflow/commit/a09ab4e77afdcc6e1e045c9d41d5edab63aafc1a
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/a09ab4e77afdcc6e1e045c9d41d5edab63aafc1a
8
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r6jx-9g48-2r5r
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r6jx-9g48-2r5r
9
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37678
reference_id CVE-2021-37678
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37678
11
reference_url https://github.com/advisories/GHSA-r6jx-9g48-2r5r
reference_id GHSA-r6jx-9g48-2r5r
reference_type
scores
url https://github.com/advisories/GHSA-r6jx-9g48-2r5r
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37678, GHSA-r6jx-9g48-2r5r, PYSEC-2021-300, PYSEC-2021-591, PYSEC-2021-789
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gfss-uup9-vbcg
72
url VCID-gtvx-jmfk-m3as
vulnerability_id VCID-gtvx-jmfk-m3as
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-562.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-562.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-760.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-760.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-271.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-271.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/7bdf50bb4f5c54a4997c379092888546c97c3ebd
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/7bdf50bb4f5c54a4997c379092888546c97c3ebd
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6gv8-p3vj-pxvr
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6gv8-p3vj-pxvr
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37649
reference_id CVE-2021-37649
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37649
8
reference_url https://github.com/advisories/GHSA-6gv8-p3vj-pxvr
reference_id GHSA-6gv8-p3vj-pxvr
reference_type
scores
url https://github.com/advisories/GHSA-6gv8-p3vj-pxvr
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37649, GHSA-6gv8-p3vj-pxvr, PYSEC-2021-271, PYSEC-2021-562, PYSEC-2021-760
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gtvx-jmfk-m3as
73
url VCID-h638-b3zk-wqfa
vulnerability_id VCID-h638-b3zk-wqfa
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-637.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-637.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-835.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-835.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-420.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-420.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/8b202f08d52e8206af2bdb2112a62fafbc546ec7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/8b202f08d52e8206af2bdb2112a62fafbc546ec7
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3rcw-9p9x-582v
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3rcw-9p9x-582v
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41228
reference_id CVE-2021-41228
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41228
8
reference_url https://github.com/advisories/GHSA-3rcw-9p9x-582v
reference_id GHSA-3rcw-9p9x-582v
reference_type
scores
url https://github.com/advisories/GHSA-3rcw-9p9x-582v
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41228, GHSA-3rcw-9p9x-582v, PYSEC-2021-420, PYSEC-2021-637, PYSEC-2021-835
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h638-b3zk-wqfa
74
url VCID-hjh6-h2qm-qqf1
vulnerability_id VCID-hjh6-h2qm-qqf1
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-603.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-603.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-801.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-801.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-312.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-312.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/ee119d4a498979525046fba1c3dd3f13a039fbb1
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/ee119d4a498979525046fba1c3dd3f13a039fbb1
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3hxh-8cp2-g4hg
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3hxh-8cp2-g4hg
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37690
reference_id CVE-2021-37690
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37690
8
reference_url https://github.com/advisories/GHSA-3hxh-8cp2-g4hg
reference_id GHSA-3hxh-8cp2-g4hg
reference_type
scores
url https://github.com/advisories/GHSA-3hxh-8cp2-g4hg
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37690, GHSA-3hxh-8cp2-g4hg, PYSEC-2021-312, PYSEC-2021-603, PYSEC-2021-801
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hjh6-h2qm-qqf1
75
url VCID-hyby-xv7h-dfhv
vulnerability_id VCID-hyby-xv7h-dfhv
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-574.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-574.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-772.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-772.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-283.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-283.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/8a84f7a2b5a2b27ecf88d25bad9ac777cd2f7992
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/8a84f7a2b5a2b27ecf88d25bad9ac777cd2f7992
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf88-j2mg-cc82
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf88-j2mg-cc82
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37661
reference_id CVE-2021-37661
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37661
8
reference_url https://github.com/advisories/GHSA-gf88-j2mg-cc82
reference_id GHSA-gf88-j2mg-cc82
reference_type
scores
url https://github.com/advisories/GHSA-gf88-j2mg-cc82
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37661, GHSA-gf88-j2mg-cc82, PYSEC-2021-283, PYSEC-2021-574, PYSEC-2021-772
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hyby-xv7h-dfhv
76
url VCID-j5dh-pqjc-6khb
vulnerability_id VCID-j5dh-pqjc-6khb
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-601.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-601.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-799.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-799.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-310.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-310.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/internal/optimized/optimized_ops.h#L268-L285
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/internal/optimized/optimized_ops.h#L268-L285
5
reference_url https://github.com/tensorflow/tensorflow/commit/15691e456c7dc9bd6be203b09765b063bf4a380c
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/15691e456c7dc9bd6be203b09765b063bf4a380c
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vcjj-9vg7-vf68
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vcjj-9vg7-vf68
7
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37688
reference_id CVE-2021-37688
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37688
9
reference_url https://github.com/advisories/GHSA-vcjj-9vg7-vf68
reference_id GHSA-vcjj-9vg7-vf68
reference_type
scores
url https://github.com/advisories/GHSA-vcjj-9vg7-vf68
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37688, GHSA-vcjj-9vg7-vf68, PYSEC-2021-310, PYSEC-2021-601, PYSEC-2021-799
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j5dh-pqjc-6khb
77
url VCID-jgpf-xs7n-sbcn
vulnerability_id VCID-jgpf-xs7n-sbcn
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `Dequantize` is vulnerable to an integer overflow weakness. The `axis` argument can be `-1` (the default value for the optional argument) or any other positive value at most the number of dimensions of the input. Unfortunately, the upper bound is not checked, and, since the code computes `axis + 1`, an attacker can trigger an integer overflow. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-51.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-51.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-106.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-106.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/ops/array_ops.cc#L3001-L3034
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/ops/array_ops.cc#L3001-L3034
4
reference_url https://github.com/tensorflow/tensorflow/commit/b64638ec5ccaa77b7c1eb90958e3d85ce381f91b
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/b64638ec5ccaa77b7c1eb90958e3d85ce381f91b
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c6fh-56w7-fvjw
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c6fh-56w7-fvjw
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21727
reference_id CVE-2022-21727
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21727
7
reference_url https://github.com/advisories/GHSA-c6fh-56w7-fvjw
reference_id GHSA-c6fh-56w7-fvjw
reference_type
scores
url https://github.com/advisories/GHSA-c6fh-56w7-fvjw
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21727, GHSA-c6fh-56w7-fvjw, PYSEC-2022-106, PYSEC-2022-51
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jgpf-xs7n-sbcn
78
url VCID-jhes-k3ad-eudj
vulnerability_id VCID-jhes-k3ad-eudj
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-600.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-600.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-798.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-798.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-309.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-309.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/gather.cc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/gather.cc
5
reference_url https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/gather_nd.cc#L124
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/gather_nd.cc#L124
6
reference_url https://github.com/tensorflow/tensorflow/commit/bb6a0383ed553c286f87ca88c207f6774d5c4a8f
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/bb6a0383ed553c286f87ca88c207f6774d5c4a8f
7
reference_url https://github.com/tensorflow/tensorflow/commit/eb921122119a6b6e470ee98b89e65d721663179d
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/eb921122119a6b6e470ee98b89e65d721663179d
8
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jwf9-w5xm-f437
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jwf9-w5xm-f437
9
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37687
reference_id CVE-2021-37687
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37687
11
reference_url https://github.com/advisories/GHSA-jwf9-w5xm-f437
reference_id GHSA-jwf9-w5xm-f437
reference_type
scores
url https://github.com/advisories/GHSA-jwf9-w5xm-f437
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37687, GHSA-jwf9-w5xm-f437, PYSEC-2021-309, PYSEC-2021-600, PYSEC-2021-798
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jhes-k3ad-eudj
79
url VCID-jhq5-zhxm-a3ef
vulnerability_id VCID-jhq5-zhxm-a3ef
summary Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that assertions in `function.cc` would be falsified and crash the Python interpreter. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-95.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-95.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-150.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-150.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/function.cc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/function.cc
4
reference_url https://github.com/tensorflow/tensorflow/commit/3d89911481ba6ebe8c88c1c0b595412121e6c645
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/3d89911481ba6ebe8c88c1c0b595412121e6c645
5
reference_url https://github.com/tensorflow/tensorflow/commit/dcc21c7bc972b10b6fb95c2fb0f4ab5a59680ec2
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/dcc21c7bc972b10b6fb95c2fb0f4ab5a59680ec2
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-43jf-985q-588j
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-43jf-985q-588j
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23586
reference_id CVE-2022-23586
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23586
8
reference_url https://github.com/advisories/GHSA-43jf-985q-588j
reference_id GHSA-43jf-985q-588j
reference_type
scores
url https://github.com/advisories/GHSA-43jf-985q-588j
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23586, GHSA-43jf-985q-588j, PYSEC-2022-150, PYSEC-2022-95
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jhq5-zhxm-a3ef
80
url VCID-jpzs-vcck-6kce
vulnerability_id VCID-jpzs-vcck-6kce
summary Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by a `DCHECK`. However, `DCHECK` is a no-op in production builds and an assertion failure in debug builds. In the first case execution proceeds to the dereferencing of the null pointer, whereas in the second case it results in a crash due to the assertion failure. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-79.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-79.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-134.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-134.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/full_type_util.cc#L104-L106
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/full_type_util.cc#L104-L106
4
reference_url https://github.com/tensorflow/tensorflow/commit/8a513cec4bec15961fbfdedcaa5376522980455c
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/8a513cec4bec15961fbfdedcaa5376522980455c
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9p77-mmrw-69c7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9p77-mmrw-69c7
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23570
reference_id CVE-2022-23570
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23570
7
reference_url https://github.com/advisories/GHSA-9p77-mmrw-69c7
reference_id GHSA-9p77-mmrw-69c7
reference_type
scores
url https://github.com/advisories/GHSA-9p77-mmrw-69c7
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23570, GHSA-9p77-mmrw-69c7, PYSEC-2022-134, PYSEC-2022-79
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jpzs-vcck-6kce
81
url VCID-jzyy-uhc2-mygp
vulnerability_id VCID-jzyy-uhc2-mygp
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-583.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-583.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-781.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-781.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-292.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-292.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/42459e4273c2e47a3232cc16c4f4fff3b3a35c38
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/42459e4273c2e47a3232cc16c4f4fff3b3a35c38
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9697-98pf-4rw7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9697-98pf-4rw7
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37670
reference_id CVE-2021-37670
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37670
8
reference_url https://github.com/advisories/GHSA-9697-98pf-4rw7
reference_id GHSA-9697-98pf-4rw7
reference_type
scores
url https://github.com/advisories/GHSA-9697-98pf-4rw7
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37670, GHSA-9697-98pf-4rw7, PYSEC-2021-292, PYSEC-2021-583, PYSEC-2021-781
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jzyy-uhc2-mygp
82
url VCID-k2gy-5yy5-1bda
vulnerability_id VCID-k2gy-5yy5-1bda
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-581.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-581.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-779.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-779.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-290.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-290.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/a776040a5e7ebf76eeb7eb923bf1ae417dd4d233
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/a776040a5e7ebf76eeb7eb923bf1ae417dd4d233
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2wmv-37vq-52g5
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2wmv-37vq-52g5
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37668
reference_id CVE-2021-37668
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37668
8
reference_url https://github.com/advisories/GHSA-2wmv-37vq-52g5
reference_id GHSA-2wmv-37vq-52g5
reference_type
scores
url https://github.com/advisories/GHSA-2wmv-37vq-52g5
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37668, GHSA-2wmv-37vq-52g5, PYSEC-2021-290, PYSEC-2021-581, PYSEC-2021-779
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k2gy-5yy5-1bda
83
url VCID-k3c7-w97n-abgn
vulnerability_id VCID-k3c7-w97n-abgn
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-592.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-592.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-790.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-790.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-301.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-301.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/4e2565483d0ffcadc719bd44893fb7f609bb5f12
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/4e2565483d0ffcadc719bd44893fb7f609bb5f12
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g8wg-cjwc-xhhp
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g8wg-cjwc-xhhp
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37679
reference_id CVE-2021-37679
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37679
8
reference_url https://github.com/advisories/GHSA-g8wg-cjwc-xhhp
reference_id GHSA-g8wg-cjwc-xhhp
reference_type
scores
url https://github.com/advisories/GHSA-g8wg-cjwc-xhhp
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37679, GHSA-g8wg-cjwc-xhhp, PYSEC-2021-301, PYSEC-2021-592, PYSEC-2021-790
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k3c7-w97n-abgn
84
url VCID-k5j6-8e9q-ebfh
vulnerability_id VCID-k5j6-8e9q-ebfh
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-571.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-571.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-769.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-769.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-280.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-280.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/ff8894044dfae5568ecbf2ed514c1a37dc394f1b
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/ff8894044dfae5568ecbf2ed514c1a37dc394f1b
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6p5r-g9mq-ggh2
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6p5r-g9mq-ggh2
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37658
reference_id CVE-2021-37658
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37658
8
reference_url https://github.com/advisories/GHSA-6p5r-g9mq-ggh2
reference_id GHSA-6p5r-g9mq-ggh2
reference_type
scores
url https://github.com/advisories/GHSA-6p5r-g9mq-ggh2
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37658, GHSA-6p5r-g9mq-ggh2, PYSEC-2021-280, PYSEC-2021-571, PYSEC-2021-769
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k5j6-8e9q-ebfh
85
url VCID-k9e7-kmzx-wqbn
vulnerability_id VCID-k9e7-kmzx-wqbn
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-845.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-845.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-847.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-847.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-843.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-843.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/4d74d8a00b07441cba090a02e0dd9ed385145bf4
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/4d74d8a00b07441cba090a02e0dd9ed385145bf4
5
reference_url https://github.com/tensorflow/tensorflow/commit/4dddb2fd0b01cdd196101afbba6518658a2c9e07
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/4dddb2fd0b01cdd196101afbba6518658a2c9e07
6
reference_url https://github.com/tensorflow/tensorflow/commit/579261dcd446385831fe4f7457d802a59685121d
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/579261dcd446385831fe4f7457d802a59685121d
7
reference_url https://github.com/tensorflow/tensorflow/commit/68422b215e618df5ad375bcdc6d2052e9fd3080a
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/68422b215e618df5ad375bcdc6d2052e9fd3080a
8
reference_url https://github.com/tensorflow/tensorflow/commit/da4aad5946be30e5f049920fa076e1f7ef021261
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/da4aad5946be30e5f049920fa076e1f7ef021261
9
reference_url https://github.com/tensorflow/tensorflow/commit/e7f497570abb6b4ae5af4970620cd880e4c0c904
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e7f497570abb6b4ae5af4970620cd880e4c0c904
10
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pgcq-h79j-2f69
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pgcq-h79j-2f69
11
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41206
reference_id CVE-2021-41206
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41206
13
reference_url https://github.com/advisories/GHSA-pgcq-h79j-2f69
reference_id GHSA-pgcq-h79j-2f69
reference_type
scores
url https://github.com/advisories/GHSA-pgcq-h79j-2f69
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
aliases CVE-2021-41206, GHSA-pgcq-h79j-2f69, PYSEC-2021-843, PYSEC-2021-845, PYSEC-2021-847
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k9e7-kmzx-wqbn
86
url VCID-kh95-uhfy-4bap
vulnerability_id VCID-kh95-uhfy-4bap
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-572.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-572.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-770.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-770.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-281.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-281.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/93f428fd1768df147171ed674fee1fc5ab8309ec
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/93f428fd1768df147171ed674fee1fc5ab8309ec
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q3g3-h9r4-prrc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q3g3-h9r4-prrc
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37659
reference_id CVE-2021-37659
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37659
8
reference_url https://github.com/advisories/GHSA-q3g3-h9r4-prrc
reference_id GHSA-q3g3-h9r4-prrc
reference_type
scores
url https://github.com/advisories/GHSA-q3g3-h9r4-prrc
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37659, GHSA-q3g3-h9r4-prrc, PYSEC-2021-281, PYSEC-2021-572, PYSEC-2021-770
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kh95-uhfy-4bap
87
url VCID-kq2a-p2fu-n7gc
vulnerability_id VCID-kq2a-p2fu-n7gc
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-631.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-631.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-829.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-829.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-414.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-414.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/25d622ffc432acc736b14ca3904177579e733cc6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/25d622ffc432acc736b14ca3904177579e733cc6
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cpf4-wx82-gxp6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cpf4-wx82-gxp6
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41222
reference_id CVE-2021-41222
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41222
8
reference_url https://github.com/advisories/GHSA-cpf4-wx82-gxp6
reference_id GHSA-cpf4-wx82-gxp6
reference_type
scores
url https://github.com/advisories/GHSA-cpf4-wx82-gxp6
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41222, GHSA-cpf4-wx82-gxp6, PYSEC-2021-414, PYSEC-2021-631, PYSEC-2021-829
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kq2a-p2fu-n7gc
88
url VCID-me54-9e62-qfdt
vulnerability_id VCID-me54-9e62-qfdt
summary Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would trigger a division by zero in `BiasAndClamp` implementation. There is no check that the `bias_size` is non zero. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-66.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-66.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-121.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-121.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/lite/kernels/internal/common.h#L75
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/lite/kernels/internal/common.h#L75
4
reference_url https://github.com/tensorflow/tensorflow/commit/8c6f391a2282684a25cbfec7687bd5d35261a209
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/8c6f391a2282684a25cbfec7687bd5d35261a209
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf2j-f278-xh4v
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf2j-f278-xh4v
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23557
reference_id CVE-2022-23557
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23557
7
reference_url https://github.com/advisories/GHSA-gf2j-f278-xh4v
reference_id GHSA-gf2j-f278-xh4v
reference_type
scores
url https://github.com/advisories/GHSA-gf2j-f278-xh4v
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23557, GHSA-gf2j-f278-xh4v, PYSEC-2022-121, PYSEC-2022-66
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-me54-9e62-qfdt
89
url VCID-mgvb-rccx-ffbz
vulnerability_id VCID-mgvb-rccx-ffbz
summary Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so `flr->config_proto` is `nullptr`. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-103.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-103.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-158.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-158.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/compiler/jit/xla_platform_info.cc#L43-L104
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/compiler/jit/xla_platform_info.cc#L43-L104
4
reference_url https://github.com/tensorflow/tensorflow/commit/e21af685e1828f7ca65038307df5cc06de4479e8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e21af685e1828f7ca65038307df5cc06de4479e8
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fpcp-9h7m-ffpx
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fpcp-9h7m-ffpx
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23595
reference_id CVE-2022-23595
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23595
7
reference_url https://github.com/advisories/GHSA-fpcp-9h7m-ffpx
reference_id GHSA-fpcp-9h7m-ffpx
reference_type
scores
url https://github.com/advisories/GHSA-fpcp-9h7m-ffpx
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23595, GHSA-fpcp-9h7m-ffpx, PYSEC-2022-103, PYSEC-2022-158
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mgvb-rccx-ffbz
90
url VCID-mka4-sg7r-v3am
vulnerability_id VCID-mka4-sg7r-v3am
summary Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's `SpecializeType` which results in heap OOB read/write. Due to a typo, `arg` is initialized to the `i`th mutable argument in a loop where the loop index is `j`. Hence it is possible to assign to `arg` from outside the vector of arguments. Since this is a mutable proto value, it allows both read and write to outside of bounds data. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-83.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-83.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-138.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-138.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/full_type_util.cc#L81-L102
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/full_type_util.cc#L81-L102
4
reference_url https://github.com/tensorflow/tensorflow/commit/0657c83d08845cc434175934c642299de2c0f042
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/0657c83d08845cc434175934c642299de2c0f042
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-77gp-3h4r-6428
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-77gp-3h4r-6428
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23574
reference_id CVE-2022-23574
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23574
7
reference_url https://github.com/advisories/GHSA-77gp-3h4r-6428
reference_id GHSA-77gp-3h4r-6428
reference_type
scores
url https://github.com/advisories/GHSA-77gp-3h4r-6428
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23574, GHSA-77gp-3h4r-6428, PYSEC-2022-138, PYSEC-2022-83
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mka4-sg7r-v3am
91
url VCID-n48p-tmcx-nbgz
vulnerability_id VCID-n48p-tmcx-nbgz
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-550.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-550.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-748.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-748.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-259.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-259.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/5dc7f6981fdaf74c8c5be41f393df705841fb7c5
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/5dc7f6981fdaf74c8c5be41f393df705841fb7c5
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c9qf-r67m-p7cg
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c9qf-r67m-p7cg
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37637
reference_id CVE-2021-37637
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37637
8
reference_url https://github.com/advisories/GHSA-c9qf-r67m-p7cg
reference_id GHSA-c9qf-r67m-p7cg
reference_type
scores
url https://github.com/advisories/GHSA-c9qf-r67m-p7cg
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37637, GHSA-c9qf-r67m-p7cg, PYSEC-2021-259, PYSEC-2021-550, PYSEC-2021-748
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n48p-tmcx-nbgz
92
url VCID-n8yf-dh79-83gt
vulnerability_id VCID-n8yf-dh79-83gt
summary Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorFlow can produce a memory leak if the image is invalid. After calling `png::CommonInitDecode(..., &decode)`, the `decode` value contains allocated buffers which can only be freed by calling `png::CommonFreeDecode(&decode)`. However, several error case in the function implementation invoke the `OP_REQUIRES` macro which immediately terminates the execution of the function, without allowing for the memory free to occur. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-94.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-94.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-149.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-149.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/image/decode_image_op.cc#L322-L416
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/image/decode_image_op.cc#L322-L416
4
reference_url https://github.com/tensorflow/tensorflow/commit/ab51e5b813573dc9f51efa335aebcf2994125ee9
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/ab51e5b813573dc9f51efa335aebcf2994125ee9
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fq6p-6334-8gr4
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fq6p-6334-8gr4
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23585
reference_id CVE-2022-23585
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23585
7
reference_url https://github.com/advisories/GHSA-fq6p-6334-8gr4
reference_id GHSA-fq6p-6334-8gr4
reference_type
scores
url https://github.com/advisories/GHSA-fq6p-6334-8gr4
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23585, GHSA-fq6p-6334-8gr4, PYSEC-2022-149, PYSEC-2022-94
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n8yf-dh79-83gt
93
url VCID-ngd2-qzsa-ubdv
vulnerability_id VCID-ngd2-qzsa-ubdv
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-607.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-607.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-805.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-805.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-390.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-390.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/7c1692bd417eb4f9b33ead749a41166d6080af85
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/7c1692bd417eb4f9b33ead749a41166d6080af85
5
reference_url https://github.com/tensorflow/tensorflow/commit/a871989d7b6c18cdebf2fb4f0e5c5b62fbc19edf
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/a871989d7b6c18cdebf2fb4f0e5c5b62fbc19edf
6
reference_url https://github.com/tensorflow/tensorflow/commit/d81b1351da3e8c884ff836b64458d94e4a157c15
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/d81b1351da3e8c884ff836b64458d94e4a157c15
7
reference_url https://github.com/tensorflow/tensorflow/issues/46890
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/issues/46890
8
reference_url https://github.com/tensorflow/tensorflow/issues/51908
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/issues/51908
9
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-prcg-wp5q-rv7p
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-prcg-wp5q-rv7p
10
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41197
reference_id CVE-2021-41197
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41197
12
reference_url https://github.com/advisories/GHSA-prcg-wp5q-rv7p
reference_id GHSA-prcg-wp5q-rv7p
reference_type
scores
url https://github.com/advisories/GHSA-prcg-wp5q-rv7p
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41197, GHSA-prcg-wp5q-rv7p, PYSEC-2021-390, PYSEC-2021-607, PYSEC-2021-805
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ngd2-qzsa-ubdv
94
url VCID-nu75-chwt-fkdp
vulnerability_id VCID-nu75-chwt-fkdp
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-62.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-62.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-117.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-117.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/count_ops.cc#L168-L273
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/count_ops.cc#L168-L273
4
reference_url https://github.com/tensorflow/tensorflow/commit/6f4d3e8139ec724dbbcb40505891c81dd1052c4a
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/6f4d3e8139ec724dbbcb40505891c81dd1052c4a
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x4qx-4fjv-hmw6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x4qx-4fjv-hmw6
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21738
reference_id CVE-2022-21738
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21738
7
reference_url https://github.com/advisories/GHSA-x4qx-4fjv-hmw6
reference_id GHSA-x4qx-4fjv-hmw6
reference_type
scores
url https://github.com/advisories/GHSA-x4qx-4fjv-hmw6
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21738, GHSA-x4qx-4fjv-hmw6, PYSEC-2022-117, PYSEC-2022-62
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nu75-chwt-fkdp
95
url VCID-p2z3-j6kf-p3dd
vulnerability_id VCID-p2z3-j6kf-p3dd
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-627.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-627.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-825.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-825.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-410.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-410.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/a8ad3e5e79c75f36edb81e0ba3f3c0c5442aeddc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/a8ad3e5e79c75f36edb81e0ba3f3c0c5442aeddc
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9crf-c6qr-r273
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9crf-c6qr-r273
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41218
reference_id CVE-2021-41218
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41218
8
reference_url https://github.com/advisories/GHSA-9crf-c6qr-r273
reference_id GHSA-9crf-c6qr-r273
reference_type
scores
url https://github.com/advisories/GHSA-9crf-c6qr-r273
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41218, GHSA-9crf-c6qr-r273, PYSEC-2021-410, PYSEC-2021-627, PYSEC-2021-825
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p2z3-j6kf-p3dd
96
url VCID-pgwz-utzn-hkh9
vulnerability_id VCID-pgwz-utzn-hkh9
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-582.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-582.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-780.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-780.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-291.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-291.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/3a7362750d5c372420aa8f0caf7bf5b5c3d0f52d
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/3a7362750d5c372420aa8f0caf7bf5b5c3d0f52d
5
reference_url https://github.com/tensorflow/tensorflow/commit/b5cdbf12ffcaaffecf98f22a6be5a64bb96e4f58
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/b5cdbf12ffcaaffecf98f22a6be5a64bb96e4f58
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vmjw-c2vp-p33c
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vmjw-c2vp-p33c
7
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37669
reference_id CVE-2021-37669
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37669
9
reference_url https://github.com/advisories/GHSA-vmjw-c2vp-p33c
reference_id GHSA-vmjw-c2vp-p33c
reference_type
scores
url https://github.com/advisories/GHSA-vmjw-c2vp-p33c
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37669, GHSA-vmjw-c2vp-p33c, PYSEC-2021-291, PYSEC-2021-582, PYSEC-2021-780
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pgwz-utzn-hkh9
97
url VCID-ps14-2s8s-u3cr
vulnerability_id VCID-ps14-2s8s-u3cr
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-548.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-548.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-746.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-746.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-257.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-257.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/87158f43f05f2720a374f3e6d22a7aaa3a33f750
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/87158f43f05f2720a374f3e6d22a7aaa3a33f750
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cgfm-62j4-v4rf
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cgfm-62j4-v4rf
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37635
reference_id CVE-2021-37635
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37635
8
reference_url https://github.com/advisories/GHSA-cgfm-62j4-v4rf
reference_id GHSA-cgfm-62j4-v4rf
reference_type
scores
url https://github.com/advisories/GHSA-cgfm-62j4-v4rf
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37635, GHSA-cgfm-62j4-v4rf, PYSEC-2021-257, PYSEC-2021-548, PYSEC-2021-746
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ps14-2s8s-u3cr
98
url VCID-psey-gff8-nyg8
vulnerability_id VCID-psey-gff8-nyg8
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `*Bincount` operations allows malicious users to cause denial of service by passing in arguments which would trigger a `CHECK`-fail. There are several conditions that the input arguments must satisfy. Some are not caught during shape inference and others are not caught during kernel implementation. This results in `CHECK` failures later when the output tensors get allocated. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-61.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-61.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-116.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-116.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/bincount_op.cc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/bincount_op.cc
4
reference_url https://github.com/tensorflow/tensorflow/commit/7019ce4f68925fd01cdafde26f8d8c938f47e6f9
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/7019ce4f68925fd01cdafde26f8d8c938f47e6f9
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f2vv-v9cg-qhh7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f2vv-v9cg-qhh7
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21737
reference_id CVE-2022-21737
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21737
7
reference_url https://github.com/advisories/GHSA-f2vv-v9cg-qhh7
reference_id GHSA-f2vv-v9cg-qhh7
reference_type
scores
url https://github.com/advisories/GHSA-f2vv-v9cg-qhh7
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21737, GHSA-f2vv-v9cg-qhh7, PYSEC-2022-116, PYSEC-2022-61
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-psey-gff8-nyg8
99
url VCID-pve4-4466-tqah
vulnerability_id VCID-pve4-4466-tqah
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ConcatV2` can be used to trigger a denial of service attack via a segfault caused by a type confusion. The `axis` argument is translated into `concat_dim` in the `ConcatShapeHelper` helper function. Then, a value for `min_rank` is computed based on `concat_dim`. This is then used to validate that the `values` tensor has at least the required rank. However, `WithRankAtLeast` receives the lower bound as a 64-bits value and then compares it against the maximum 32-bits integer value that could be represented. Due to the fact that `min_rank` is a 32-bits value and the value of `axis`, the `rank` argument is a negative value, so the error check is bypassed. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-55.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-55.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-110.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-110.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/common_shape_fns.cc#L1961-L2059
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/common_shape_fns.cc#L1961-L2059
4
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/shape_inference.cc#L345-L358
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/shape_inference.cc#L345-L358
5
reference_url https://github.com/tensorflow/tensorflow/commit/08d7b00c0a5a20926363849f611729f53f3ec022
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/08d7b00c0a5a20926363849f611729f53f3ec022
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m4hf-j54p-p353
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m4hf-j54p-p353
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21731
reference_id CVE-2022-21731
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21731
8
reference_url https://github.com/advisories/GHSA-m4hf-j54p-p353
reference_id GHSA-m4hf-j54p-p353
reference_type
scores
url https://github.com/advisories/GHSA-m4hf-j54p-p353
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21731, GHSA-m4hf-j54p-p353, PYSEC-2022-110, PYSEC-2022-55
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pve4-4466-tqah
100
url VCID-qa1r-3bun-f7e1
vulnerability_id VCID-qa1r-3bun-f7e1
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-557.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-557.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-755.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-755.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-266.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-266.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/8a6e874437670045e6c7dc6154c7412b4a2135e2
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/8a6e874437670045e6c7dc6154c7412b4a2135e2
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27j5-4p9v-pp67
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27j5-4p9v-pp67
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37644
reference_id CVE-2021-37644
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37644
8
reference_url https://github.com/advisories/GHSA-27j5-4p9v-pp67
reference_id GHSA-27j5-4p9v-pp67
reference_type
scores
url https://github.com/advisories/GHSA-27j5-4p9v-pp67
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37644, GHSA-27j5-4p9v-pp67, PYSEC-2021-266, PYSEC-2021-557, PYSEC-2021-755
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qa1r-3bun-f7e1
101
url VCID-qe3m-tepe-sqbq
vulnerability_id VCID-qe3m-tepe-sqbq
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-622.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-622.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-820.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-820.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-405.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-405.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/afac8158d43691661ad083f6dd9e56f327c1dcb7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/afac8158d43691661ad083f6dd9e56f327c1dcb7
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h67m-xg8f-fxcf
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h67m-xg8f-fxcf
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41213
reference_id CVE-2021-41213
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41213
8
reference_url https://github.com/advisories/GHSA-h67m-xg8f-fxcf
reference_id GHSA-h67m-xg8f-fxcf
reference_type
scores
url https://github.com/advisories/GHSA-h67m-xg8f-fxcf
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41213, GHSA-h67m-xg8f-fxcf, PYSEC-2021-405, PYSEC-2021-622, PYSEC-2021-820
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qe3m-tepe-sqbq
102
url VCID-r184-6v15-tqgm
vulnerability_id VCID-r184-6v15-tqgm
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-610.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-610.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-808.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-808.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-393.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-393.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/874bda09e6702cd50bac90b453b50bcc65b2769e
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/874bda09e6702cd50bac90b453b50bcc65b2769e
5
reference_url https://github.com/tensorflow/tensorflow/issues/46909
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/issues/46909
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh8h-7j2j-qv4f
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh8h-7j2j-qv4f
7
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41200
reference_id CVE-2021-41200
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41200
9
reference_url https://github.com/advisories/GHSA-gh8h-7j2j-qv4f
reference_id GHSA-gh8h-7j2j-qv4f
reference_type
scores
url https://github.com/advisories/GHSA-gh8h-7j2j-qv4f
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41200, GHSA-gh8h-7j2j-qv4f, PYSEC-2021-393, PYSEC-2021-610, PYSEC-2021-808
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r184-6v15-tqgm
103
url VCID-rapw-1955-2ydq
vulnerability_id VCID-rapw-1955-2ydq
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `MapStage` is vulnerable a `CHECK`-fail if the key tensor is not a scalar. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-58.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-58.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-113.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-113.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/map_stage_op.cc#L519-L550
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/map_stage_op.cc#L519-L550
4
reference_url https://github.com/tensorflow/tensorflow/commit/f57315566d7094f322b784947093406c2aea0d7d
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/f57315566d7094f322b784947093406c2aea0d7d
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gcvh-66ff-4mwm
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gcvh-66ff-4mwm
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21734
reference_id CVE-2022-21734
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21734
7
reference_url https://github.com/advisories/GHSA-gcvh-66ff-4mwm
reference_id GHSA-gcvh-66ff-4mwm
reference_type
scores
url https://github.com/advisories/GHSA-gcvh-66ff-4mwm
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21734, GHSA-gcvh-66ff-4mwm, PYSEC-2022-113, PYSEC-2022-58
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rapw-1955-2ydq
104
url VCID-rgat-jz7g-5qgd
vulnerability_id VCID-rgat-jz7g-5qgd
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `StringNGrams` can be used to trigger a denial of service attack by causing an out of memory condition after an integer overflow. We are missing a validation on `pad_witdh` and that result in computing a negative value for `ngram_width` which is later used to allocate parts of the output. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-57.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-57.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-112.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-112.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/string_ngrams_op.cc#L29-L161
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/string_ngrams_op.cc#L29-L161
4
reference_url https://github.com/tensorflow/tensorflow/commit/f68fdab93fb7f4ddb4eb438c8fe052753c9413e8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/f68fdab93fb7f4ddb4eb438c8fe052753c9413e8
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-98j8-c9q4-r38g
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-98j8-c9q4-r38g
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21733
reference_id CVE-2022-21733
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21733
7
reference_url https://github.com/advisories/GHSA-98j8-c9q4-r38g
reference_id GHSA-98j8-c9q4-r38g
reference_type
scores
url https://github.com/advisories/GHSA-98j8-c9q4-r38g
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21733, GHSA-98j8-c9q4-r38g, PYSEC-2022-112, PYSEC-2022-57
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rgat-jz7g-5qgd
105
url VCID-rvbe-fjhx-k3d8
vulnerability_id VCID-rvbe-fjhx-k3d8
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-586.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-586.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-784.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-784.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-295.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-295.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/d7de67733925de196ec8863a33445b73f9562d1d
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/d7de67733925de196ec8863a33445b73f9562d1d
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-278g-rq84-9hmg
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-278g-rq84-9hmg
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37673
reference_id CVE-2021-37673
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37673
8
reference_url https://github.com/advisories/GHSA-278g-rq84-9hmg
reference_id GHSA-278g-rq84-9hmg
reference_type
scores
url https://github.com/advisories/GHSA-278g-rq84-9hmg
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37673, GHSA-278g-rq84-9hmg, PYSEC-2021-295, PYSEC-2021-586, PYSEC-2021-784
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rvbe-fjhx-k3d8
106
url VCID-rwm5-mh67-ffak
vulnerability_id VCID-rwm5-mh67-ffak
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-590.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-590.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-788.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-788.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-299.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-299.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/da857cfa0fde8f79ad0afdbc94e88b5d4bbec764
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/da857cfa0fde8f79ad0afdbc94e88b5d4bbec764
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qfpc-5pjr-mh26
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qfpc-5pjr-mh26
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37677
reference_id CVE-2021-37677
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37677
8
reference_url https://github.com/advisories/GHSA-qfpc-5pjr-mh26
reference_id GHSA-qfpc-5pjr-mh26
reference_type
scores
url https://github.com/advisories/GHSA-qfpc-5pjr-mh26
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37677, GHSA-qfpc-5pjr-mh26, PYSEC-2021-299, PYSEC-2021-590, PYSEC-2021-788
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rwm5-mh67-ffak
107
url VCID-rz3q-tnf3-mygj
vulnerability_id VCID-rz3q-tnf3-mygj
summary Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that `TensorByteSize` would trigger `CHECK` failures. `TensorShape` constructor throws a `CHECK`-fail if shape is partial or has a number of elements that would overflow the size of an `int`. The `PartialTensorShape` constructor instead does not cause a `CHECK`-abort if the shape is partial, which is exactly what this function needs to be able to return `-1`. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-91.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-91.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-146.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-146.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/attr_value_util.cc#L46-L50
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/attr_value_util.cc#L46-L50
4
reference_url https://github.com/tensorflow/tensorflow/commit/c2426bba00a01de6913738df8fa78e0215fcce02
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/c2426bba00a01de6913738df8fa78e0215fcce02
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4j82-5ccr-4r8v
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4j82-5ccr-4r8v
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23582
reference_id CVE-2022-23582
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23582
7
reference_url https://github.com/advisories/GHSA-4j82-5ccr-4r8v
reference_id GHSA-4j82-5ccr-4r8v
reference_type
scores
url https://github.com/advisories/GHSA-4j82-5ccr-4r8v
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23582, GHSA-4j82-5ccr-4r8v, PYSEC-2022-146, PYSEC-2022-91
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rz3q-tnf3-mygj
108
url VCID-sb76-qn7q-2ben
vulnerability_id VCID-sb76-qn7q-2ben
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` is vulnerable to a heap overflow. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-64.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-64.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-119.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-119.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/count_ops.cc#L168-L273
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/count_ops.cc#L168-L273
4
reference_url https://github.com/tensorflow/tensorflow/commit/2b7100d6cdff36aa21010a82269bc05a6d1cc74a
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/2b7100d6cdff36aa21010a82269bc05a6d1cc74a
5
reference_url https://github.com/tensorflow/tensorflow/commit/adbbabdb0d3abb3cdeac69e38a96de1d678b24b3
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/adbbabdb0d3abb3cdeac69e38a96de1d678b24b3
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-44qp-9wwf-734r
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-44qp-9wwf-734r
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21740
reference_id CVE-2022-21740
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21740
8
reference_url https://github.com/advisories/GHSA-44qp-9wwf-734r
reference_id GHSA-44qp-9wwf-734r
reference_type
scores
url https://github.com/advisories/GHSA-44qp-9wwf-734r
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21740, GHSA-44qp-9wwf-734r, PYSEC-2022-119, PYSEC-2022-64
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sb76-qn7q-2ben
109
url VCID-sney-upy2-cub5
vulnerability_id VCID-sney-upy2-cub5
summary Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in `TfLiteIntArrayCreate`. The `TfLiteIntArrayGetSizeInBytes` returns an `int` instead of a `size_t. An attacker can control model inputs such that `computed_size` overflows the size of `int` datatype. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-67.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-67.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-122.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-122.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L24-L33
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L24-L33
4
reference_url https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L53-L60
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L53-L60
5
reference_url https://github.com/tensorflow/tensorflow/commit/a1e1511dde36b3f8aa27a6ec630838e7ea40e091
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/a1e1511dde36b3f8aa27a6ec630838e7ea40e091
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9gwq-6cwj-47h3
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9gwq-6cwj-47h3
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23558
reference_id CVE-2022-23558
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23558
8
reference_url https://github.com/advisories/GHSA-9gwq-6cwj-47h3
reference_id GHSA-9gwq-6cwj-47h3
reference_type
scores
url https://github.com/advisories/GHSA-9gwq-6cwj-47h3
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23558, GHSA-9gwq-6cwj-47h3, PYSEC-2022-122, PYSEC-2022-67
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sney-upy2-cub5
110
url VCID-t3m9-6h7k-9uax
vulnerability_id VCID-t3m9-6h7k-9uax
summary Tensorflow is an Open Source Machine Learning Framework. The `GraphDef` format in TensorFlow does not allow self recursive functions. The runtime assumes that this invariant is satisfied. However, a `GraphDef` containing a fragment such as the following can be consumed when loading a `SavedModel`. This would result in a stack overflow during execution as resolving each `NodeDef` means resolving the function itself and its nodes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-100.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-100.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-155.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-155.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/commit/448a16182065bd08a202d9057dd8ca541e67996c
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/448a16182065bd08a202d9057dd8ca541e67996c
4
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-247x-2f9f-5wp7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-247x-2f9f-5wp7
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23591
reference_id CVE-2022-23591
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23591
6
reference_url https://github.com/advisories/GHSA-247x-2f9f-5wp7
reference_id GHSA-247x-2f9f-5wp7
reference_type
scores
url https://github.com/advisories/GHSA-247x-2f9f-5wp7
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23591, GHSA-247x-2f9f-5wp7, PYSEC-2022-100, PYSEC-2022-155
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t3m9-6h7k-9uax
111
url VCID-tdhn-4egx-zkfk
vulnerability_id VCID-tdhn-4egx-zkfk
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-556.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-556.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-754.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-754.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-265.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-265.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/482da92095c4d48f8784b1f00dda4f81c28d2988
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/482da92095c4d48f8784b1f00dda4f81c28d2988
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fcwc-p4fc-c5cc
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fcwc-p4fc-c5cc
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37643
reference_id CVE-2021-37643
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37643
8
reference_url https://github.com/advisories/GHSA-fcwc-p4fc-c5cc
reference_id GHSA-fcwc-p4fc-c5cc
reference_type
scores
url https://github.com/advisories/GHSA-fcwc-p4fc-c5cc
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37643, GHSA-fcwc-p4fc-c5cc, PYSEC-2021-265, PYSEC-2021-556, PYSEC-2021-754
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tdhn-4egx-zkfk
112
url VCID-tdw3-fns6-6baz
vulnerability_id VCID-tdw3-fns6-6baz
summary Tensorflow is an Open Source Machine Learning Framework. When decoding a resource handle tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments. This allows attackers to cause denial of services in TensorFlow processes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-73.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-73.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-128.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-128.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/commit/14fea662350e7c26eb5fe1be2ac31704e5682ee6
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/14fea662350e7c26eb5fe1be2ac31704e5682ee6
4
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8rcj-c8pj-v3m3
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8rcj-c8pj-v3m3
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23564
reference_id CVE-2022-23564
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23564
6
reference_url https://github.com/advisories/GHSA-8rcj-c8pj-v3m3
reference_id GHSA-8rcj-c8pj-v3m3
reference_type
scores
url https://github.com/advisories/GHSA-8rcj-c8pj-v3m3
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23564, GHSA-8rcj-c8pj-v3m3, PYSEC-2022-128, PYSEC-2022-73
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tdw3-fns6-6baz
113
url VCID-tf8j-fa4n-2qcy
vulnerability_id VCID-tf8j-fa4n-2qcy
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-633.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-633.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-831.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-831.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-416.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-416.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/67bfd9feeecfb3c61d80f0e46d89c170fbee682b
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/67bfd9feeecfb3c61d80f0e46d89c170fbee682b
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rg3m-hqc5-344v
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rg3m-hqc5-344v
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41224
reference_id CVE-2021-41224
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41224
8
reference_url https://github.com/advisories/GHSA-rg3m-hqc5-344v
reference_id GHSA-rg3m-hqc5-344v
reference_type
scores
url https://github.com/advisories/GHSA-rg3m-hqc5-344v
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41224, GHSA-rg3m-hqc5-344v, PYSEC-2021-416, PYSEC-2021-633, PYSEC-2021-831
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tf8j-fa4n-2qcy
114
url VCID-ty1g-525f-jkan
vulnerability_id VCID-ty1g-525f-jkan
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-625.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-625.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-823.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-823.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-408.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-408.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/ops/array_ops.cc#L121-L185
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/ops/array_ops.cc#L121-L185
5
reference_url https://github.com/tensorflow/tensorflow/commit/c79ba87153ee343401dbe9d1954d7f79e521eb14
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/c79ba87153ee343401dbe9d1954d7f79e521eb14
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3ff2-r28g-w7h9
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3ff2-r28g-w7h9
7
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41216
reference_id CVE-2021-41216
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41216
9
reference_url https://github.com/advisories/GHSA-3ff2-r28g-w7h9
reference_id GHSA-3ff2-r28g-w7h9
reference_type
scores
url https://github.com/advisories/GHSA-3ff2-r28g-w7h9
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41216, GHSA-3ff2-r28g-w7h9, PYSEC-2021-408, PYSEC-2021-625, PYSEC-2021-823
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ty1g-525f-jkan
115
url VCID-u197-te8d-jydm
vulnerability_id VCID-u197-te8d-jydm
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `QuantizedMaxPool` has an undefined behavior where user controlled inputs can trigger a reference binding to null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-63.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-63.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-118.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-118.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/quantized_pooling_ops.cc#L114-L130
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/quantized_pooling_ops.cc#L114-L130
4
reference_url https://github.com/tensorflow/tensorflow/commit/53b0dd6dc5957652f35964af16b892ec9af4a559
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/53b0dd6dc5957652f35964af16b892ec9af4a559
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3mw4-6rj6-74g5
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3mw4-6rj6-74g5
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21739
reference_id CVE-2022-21739
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21739
7
reference_url https://github.com/advisories/GHSA-3mw4-6rj6-74g5
reference_id GHSA-3mw4-6rj6-74g5
reference_type
scores
url https://github.com/advisories/GHSA-3mw4-6rj6-74g5
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21739, GHSA-3mw4-6rj6-74g5, PYSEC-2022-118, PYSEC-2022-63
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u197-te8d-jydm
116
url VCID-uqae-1yv2-fuc2
vulnerability_id VCID-uqae-1yv2-fuc2
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-628.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-628.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-826.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-826.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-411.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-411.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/e6cf28c72ba2eb949ca950d834dd6d66bb01cfae
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e6cf28c72ba2eb949ca950d834dd6d66bb01cfae
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4f99-p9c2-3j8x
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4f99-p9c2-3j8x
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41219
reference_id CVE-2021-41219
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41219
8
reference_url https://github.com/advisories/GHSA-4f99-p9c2-3j8x
reference_id GHSA-4f99-p9c2-3j8x
reference_type
scores
url https://github.com/advisories/GHSA-4f99-p9c2-3j8x
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41219, GHSA-4f99-p9c2-3j8x, PYSEC-2021-411, PYSEC-2021-628, PYSEC-2021-826
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uqae-1yv2-fuc2
117
url VCID-urvs-ucet-y7ba
vulnerability_id VCID-urvs-ucet-y7ba
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-587.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-587.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-785.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-785.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-296.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-296.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-068.md
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-068.md
5
reference_url https://github.com/tensorflow/tensorflow/commit/136b51f10903e044308cf77117c0ed9871350475
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/136b51f10903e044308cf77117c0ed9871350475
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7ghq-fvr3-pj2x
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7ghq-fvr3-pj2x
7
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37674
reference_id CVE-2021-37674
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37674
9
reference_url https://github.com/advisories/GHSA-7ghq-fvr3-pj2x
reference_id GHSA-7ghq-fvr3-pj2x
reference_type
scores
url https://github.com/advisories/GHSA-7ghq-fvr3-pj2x
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37674, GHSA-7ghq-fvr3-pj2x, PYSEC-2021-296, PYSEC-2021-587, PYSEC-2021-785
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-urvs-ucet-y7ba
118
url VCID-v7xq-gfna-5kfw
vulnerability_id VCID-v7xq-gfna-5kfw
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-614.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-614.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-812.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-812.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-397.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-397.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/7731e8dfbe4a56773be5dc94d631611211156659
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/7731e8dfbe4a56773be5dc94d631611211156659
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-786j-5qwq-r36x
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-786j-5qwq-r36x
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41204
reference_id CVE-2021-41204
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41204
8
reference_url https://github.com/advisories/GHSA-786j-5qwq-r36x
reference_id GHSA-786j-5qwq-r36x
reference_type
scores
url https://github.com/advisories/GHSA-786j-5qwq-r36x
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41204, GHSA-786j-5qwq-r36x, PYSEC-2021-397, PYSEC-2021-614, PYSEC-2021-812
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v7xq-gfna-5kfw
119
url VCID-vdrh-8w5d-dffg
vulnerability_id VCID-vdrh-8w5d-dffg
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-573.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-573.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-771.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-771.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-282.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-282.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/e86605c0a336c088b638da02135ea6f9f6753618
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e86605c0a336c088b638da02135ea6f9f6753618
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cm5x-837x-jf3c
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cm5x-837x-jf3c
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37660
reference_id CVE-2021-37660
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37660
8
reference_url https://github.com/advisories/GHSA-cm5x-837x-jf3c
reference_id GHSA-cm5x-837x-jf3c
reference_type
scores
url https://github.com/advisories/GHSA-cm5x-837x-jf3c
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37660, GHSA-cm5x-837x-jf3c, PYSEC-2021-282, PYSEC-2021-573, PYSEC-2021-771
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vdrh-8w5d-dffg
120
url VCID-vfkq-sva3-nybz
vulnerability_id VCID-vfkq-sva3-nybz
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ReverseSequence` does not fully validate the value of `batch_dim` and can result in a heap OOB read. There is a check to make sure the value of `batch_dim` does not go over the rank of the input, but there is no check for negative values. Negative dimensions are allowed in some cases to mimic Python's negative indexing (i.e., indexing from the end of the array), however if the value is too negative then the implementation of `Dim` would access elements before the start of an array. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-52.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-52.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-107.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-107.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/shape_inference.h#L415-L428
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/shape_inference.h#L415-L428
4
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/ops/array_ops.cc#L1636-L1671
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/ops/array_ops.cc#L1636-L1671
5
reference_url https://github.com/tensorflow/tensorflow/commit/37c01fb5e25c3d80213060460196406c43d31995
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/37c01fb5e25c3d80213060460196406c43d31995
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6gmv-pjp9-p8w8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6gmv-pjp9-p8w8
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21728
reference_id CVE-2022-21728
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21728
8
reference_url https://github.com/advisories/GHSA-6gmv-pjp9-p8w8
reference_id GHSA-6gmv-pjp9-p8w8
reference_type
scores
url https://github.com/advisories/GHSA-6gmv-pjp9-p8w8
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21728, GHSA-6gmv-pjp9-p8w8, PYSEC-2022-107, PYSEC-2022-52
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vfkq-sva3-nybz
121
url VCID-vsxn-sk73-dbg5
vulnerability_id VCID-vsxn-sk73-dbg5
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-615.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-615.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-813.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-813.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-398.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-398.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/7cf73a2274732c9d82af51c2bc2cf90d13cd7e6d
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/7cf73a2274732c9d82af51c2bc2cf90d13cd7e6d
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rx-x2rw-pc6f
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rx-x2rw-pc6f
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41205
reference_id CVE-2021-41205
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41205
8
reference_url https://github.com/advisories/GHSA-49rx-x2rw-pc6f
reference_id GHSA-49rx-x2rw-pc6f
reference_type
scores
url https://github.com/advisories/GHSA-49rx-x2rw-pc6f
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41205, GHSA-49rx-x2rw-pc6f, PYSEC-2021-398, PYSEC-2021-615, PYSEC-2021-813
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vsxn-sk73-dbg5
122
url VCID-w1s8-6nq3-4bgp
vulnerability_id VCID-w1s8-6nq3-4bgp
summary Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that any binary op would trigger `CHECK` failures. This occurs when the protobuf part corresponding to the tensor arguments is modified such that the `dtype` no longer matches the `dtype` expected by the op. In that case, calling the templated binary operator for the binary op would receive corrupted data, due to the type confusion involved. If `Tin` and `Tout` don't match the type of data in `out` and `input_*` tensors then `flat<*>` would interpret it wrongly. In most cases, this would be a silent failure, but we have noticed scenarios where this results in a `CHECK` crash, hence a denial of service. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-92.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-92.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-147.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-147.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/cwise_ops_common.h#L88-L137
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/cwise_ops_common.h#L88-L137
4
reference_url https://github.com/tensorflow/tensorflow/commit/a7c02f1a9bbc35473969618a09ee5f9f5d3e52d9
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/a7c02f1a9bbc35473969618a09ee5f9f5d3e52d9
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gjqc-q9g6-q2j3
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gjqc-q9g6-q2j3
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23583
reference_id CVE-2022-23583
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23583
7
reference_url https://github.com/advisories/GHSA-gjqc-q9g6-q2j3
reference_id GHSA-gjqc-q9g6-q2j3
reference_type
scores
url https://github.com/advisories/GHSA-gjqc-q9g6-q2j3
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23583, GHSA-gjqc-q9g6-q2j3, PYSEC-2022-147, PYSEC-2022-92
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w1s8-6nq3-4bgp
123
url VCID-wd74-3jrn-tqag
vulnerability_id VCID-wd74-3jrn-tqag
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-604.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-604.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-802.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-802.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-313.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-313.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/0575b640091680cfb70f4dd93e70658de43b94f9
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/0575b640091680cfb70f4dd93e70658de43b94f9
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27qf-jwm8-g7f3
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27qf-jwm8-g7f3
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37691
reference_id CVE-2021-37691
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37691
8
reference_url https://github.com/advisories/GHSA-27qf-jwm8-g7f3
reference_id GHSA-27qf-jwm8-g7f3
reference_type
scores
url https://github.com/advisories/GHSA-27qf-jwm8-g7f3
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37691, GHSA-27qf-jwm8-g7f3, PYSEC-2021-313, PYSEC-2021-604, PYSEC-2021-802
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wd74-3jrn-tqag
124
url VCID-wdpc-4xjf-pqgh
vulnerability_id VCID-wdpc-4xjf-pqgh
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-613.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-613.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-811.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-811.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-396.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-396.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/368af875869a204b4ac552b9ddda59f6a46a56ec
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/368af875869a204b4ac552b9ddda59f6a46a56ec
5
reference_url https://github.com/tensorflow/tensorflow/commit/abcced051cb1bd8fb05046ac3b6023a7ebcc4578
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/abcced051cb1bd8fb05046ac3b6023a7ebcc4578
6
reference_url https://github.com/tensorflow/tensorflow/commit/b619c6f865715ca3b15ef1842b5b95edbaa710ad
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/b619c6f865715ca3b15ef1842b5b95edbaa710ad
7
reference_url https://github.com/tensorflow/tensorflow/commit/e8dc63704c88007ee4713076605c90188d66f3d2
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e8dc63704c88007ee4713076605c90188d66f3d2
8
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7pxj-m4jf-r6h2
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7pxj-m4jf-r6h2
9
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41203
reference_id CVE-2021-41203
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41203
11
reference_url https://github.com/advisories/GHSA-7pxj-m4jf-r6h2
reference_id GHSA-7pxj-m4jf-r6h2
reference_type
scores
url https://github.com/advisories/GHSA-7pxj-m4jf-r6h2
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41203, GHSA-7pxj-m4jf-r6h2, PYSEC-2021-396, PYSEC-2021-613, PYSEC-2021-811
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wdpc-4xjf-pqgh
125
url VCID-wskj-uyt9-akab
vulnerability_id VCID-wskj-uyt9-akab
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-609.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-609.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-807.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-807.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-392.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-392.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/e5272d4204ff5b46136a1ef1204fc00597e21837
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/e5272d4204ff5b46136a1ef1204fc00597e21837
5
reference_url https://github.com/tensorflow/tensorflow/issues/46914
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/issues/46914
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hx2-qx8j-qjqm
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hx2-qx8j-qjqm
7
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41199
reference_id CVE-2021-41199
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41199
9
reference_url https://github.com/advisories/GHSA-5hx2-qx8j-qjqm
reference_id GHSA-5hx2-qx8j-qjqm
reference_type
scores
url https://github.com/advisories/GHSA-5hx2-qx8j-qjqm
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41199, GHSA-5hx2-qx8j-qjqm, PYSEC-2021-392, PYSEC-2021-609, PYSEC-2021-807
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wskj-uyt9-akab
126
url VCID-xdz6-2ckp-a3dw
vulnerability_id VCID-xdz6-2ckp-a3dw
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-621.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-621.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-819.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-819.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-404.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-404.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fr77-rrx3-cp7g
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fr77-rrx3-cp7g
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41212
reference_id CVE-2021-41212
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41212
8
reference_url https://github.com/advisories/GHSA-fr77-rrx3-cp7g
reference_id GHSA-fr77-rrx3-cp7g
reference_type
scores
url https://github.com/advisories/GHSA-fr77-rrx3-cp7g
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41212, GHSA-fr77-rrx3-cp7g, PYSEC-2021-404, PYSEC-2021-621, PYSEC-2021-819
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xdz6-2ckp-a3dw
127
url VCID-xftt-xdnj-fuhd
vulnerability_id VCID-xftt-xdnj-fuhd
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `GetInitOp` is vulnerable to a crash caused by dereferencing a null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-86.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-86.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-141.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-141.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/cc/saved_model/loader_util.cc#L31-L61
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/cc/saved_model/loader_util.cc#L31-L61
4
reference_url https://github.com/tensorflow/tensorflow/commit/4f38b1ac8e42727e18a2f0bde06d3bee8e77b250
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/4f38b1ac8e42727e18a2f0bde06d3bee8e77b250
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8cxv-76p7-jxwr
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8cxv-76p7-jxwr
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23577
reference_id CVE-2022-23577
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23577
7
reference_url https://github.com/advisories/GHSA-8cxv-76p7-jxwr
reference_id GHSA-8cxv-76p7-jxwr
reference_type
scores
url https://github.com/advisories/GHSA-8cxv-76p7-jxwr
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23577, GHSA-8cxv-76p7-jxwr, PYSEC-2022-141, PYSEC-2022-86
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xftt-xdnj-fuhd
128
url VCID-xt2w-1h6g-2qe5
vulnerability_id VCID-xt2w-1h6g-2qe5
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-602.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-602.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-800.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-800.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-311.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-311.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/compiler/mlir/lite/transforms/optimize.cc#L67-L70
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/compiler/mlir/lite/transforms/optimize.cc#L67-L70
5
reference_url https://github.com/tensorflow/tensorflow/commit/d6b57f461b39fd1aa8c1b870f1b974aac3554955
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/d6b57f461b39fd1aa8c1b870f1b974aac3554955
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wf5p-c75w-w3wh
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wf5p-c75w-w3wh
7
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37689
reference_id CVE-2021-37689
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37689
9
reference_url https://github.com/advisories/GHSA-wf5p-c75w-w3wh
reference_id GHSA-wf5p-c75w-w3wh
reference_type
scores
url https://github.com/advisories/GHSA-wf5p-c75w-w3wh
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37689, GHSA-wf5p-c75w-w3wh, PYSEC-2021-311, PYSEC-2021-602, PYSEC-2021-800
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xt2w-1h6g-2qe5
129
url VCID-y5ak-4gg9-sqaj
vulnerability_id VCID-y5ak-4gg9-sqaj
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-617.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-617.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-815.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-815.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-400.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-400.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/5c8c9a8bfe750f9743d0c859bae112060b216f5c
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/5c8c9a8bfe750f9743d0c859bae112060b216f5c
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-57wx-m983-2f88
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-57wx-m983-2f88
6
reference_url https://security.archlinux.org/AVG-2529
reference_id AVG-2529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2529
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41208
reference_id CVE-2021-41208
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41208
8
reference_url https://github.com/advisories/GHSA-57wx-m983-2f88
reference_id GHSA-57wx-m983-2f88
reference_type
scores
url https://github.com/advisories/GHSA-57wx-m983-2f88
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.2
purl pkg:pypi/tensorflow-cpu@2.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.2
1
url pkg:pypi/tensorflow-cpu@2.6.1
purl pkg:pypi/tensorflow-cpu@2.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-65fu-yg2h-zycr
8
vulnerability VCID-6bgf-h7cu-27ec
9
vulnerability VCID-6jvw-p6me-mke6
10
vulnerability VCID-6nfa-78eb-jffv
11
vulnerability VCID-6set-8e9p-nyeu
12
vulnerability VCID-6xhv-euz8-zkc8
13
vulnerability VCID-76t8-h98v-buhf
14
vulnerability VCID-7jup-pyyw-c3eg
15
vulnerability VCID-7rgb-m55r-4yhr
16
vulnerability VCID-7z58-8eek-3fg2
17
vulnerability VCID-87r3-u8t5-m7d2
18
vulnerability VCID-8b1b-hevb-cqht
19
vulnerability VCID-af9s-d9qq-tuh7
20
vulnerability VCID-bmvq-fjkr-2fc3
21
vulnerability VCID-bvuf-q5tx-x3ec
22
vulnerability VCID-c5wa-uqe8-yqh1
23
vulnerability VCID-d3qq-2w3d-dqe8
24
vulnerability VCID-g3tv-ra2y-hqdn
25
vulnerability VCID-g5tz-zaxw-cfa2
26
vulnerability VCID-g7mk-ddes-8fa8
27
vulnerability VCID-jgpf-xs7n-sbcn
28
vulnerability VCID-jhq5-zhxm-a3ef
29
vulnerability VCID-jpzs-vcck-6kce
30
vulnerability VCID-me54-9e62-qfdt
31
vulnerability VCID-mgvb-rccx-ffbz
32
vulnerability VCID-mka4-sg7r-v3am
33
vulnerability VCID-n8yf-dh79-83gt
34
vulnerability VCID-nu75-chwt-fkdp
35
vulnerability VCID-psey-gff8-nyg8
36
vulnerability VCID-pve4-4466-tqah
37
vulnerability VCID-rapw-1955-2ydq
38
vulnerability VCID-rgat-jz7g-5qgd
39
vulnerability VCID-rz3q-tnf3-mygj
40
vulnerability VCID-sb76-qn7q-2ben
41
vulnerability VCID-sney-upy2-cub5
42
vulnerability VCID-t3m9-6h7k-9uax
43
vulnerability VCID-tdw3-fns6-6baz
44
vulnerability VCID-u197-te8d-jydm
45
vulnerability VCID-vfkq-sva3-nybz
46
vulnerability VCID-w1s8-6nq3-4bgp
47
vulnerability VCID-xftt-xdnj-fuhd
48
vulnerability VCID-yv3z-fhhz-9fa4
49
vulnerability VCID-z8wr-n2z5-pffq
50
vulnerability VCID-zfuy-5852-fug5
51
vulnerability VCID-zj5j-12r4-4bhp
52
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.1
2
url pkg:pypi/tensorflow-cpu@2.7.0
purl pkg:pypi/tensorflow-cpu@2.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-34je-dsqs-2qeh
5
vulnerability VCID-3nws-uqh8-wydf
6
vulnerability VCID-3y5w-424q-8qcn
7
vulnerability VCID-4n1w-zfpr-dugh
8
vulnerability VCID-56kw-66kj-1kb7
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-6bgf-h7cu-27ec
11
vulnerability VCID-6jvw-p6me-mke6
12
vulnerability VCID-6nfa-78eb-jffv
13
vulnerability VCID-6set-8e9p-nyeu
14
vulnerability VCID-6xhv-euz8-zkc8
15
vulnerability VCID-76t8-h98v-buhf
16
vulnerability VCID-7jup-pyyw-c3eg
17
vulnerability VCID-7rgb-m55r-4yhr
18
vulnerability VCID-7z58-8eek-3fg2
19
vulnerability VCID-87r3-u8t5-m7d2
20
vulnerability VCID-8b1b-hevb-cqht
21
vulnerability VCID-af9s-d9qq-tuh7
22
vulnerability VCID-bmvq-fjkr-2fc3
23
vulnerability VCID-bvuf-q5tx-x3ec
24
vulnerability VCID-c5wa-uqe8-yqh1
25
vulnerability VCID-d3k4-z4f1-hfhy
26
vulnerability VCID-d3qq-2w3d-dqe8
27
vulnerability VCID-e73t-pxc6-k7f3
28
vulnerability VCID-f9a1-y3bw-tkbh
29
vulnerability VCID-g3tv-ra2y-hqdn
30
vulnerability VCID-g5tz-zaxw-cfa2
31
vulnerability VCID-g7mk-ddes-8fa8
32
vulnerability VCID-hcud-kg7b-zyhx
33
vulnerability VCID-jgpf-xs7n-sbcn
34
vulnerability VCID-jhq5-zhxm-a3ef
35
vulnerability VCID-jpzs-vcck-6kce
36
vulnerability VCID-me54-9e62-qfdt
37
vulnerability VCID-mgvb-rccx-ffbz
38
vulnerability VCID-mka4-sg7r-v3am
39
vulnerability VCID-n8yf-dh79-83gt
40
vulnerability VCID-nu75-chwt-fkdp
41
vulnerability VCID-psey-gff8-nyg8
42
vulnerability VCID-pve4-4466-tqah
43
vulnerability VCID-rapw-1955-2ydq
44
vulnerability VCID-rgat-jz7g-5qgd
45
vulnerability VCID-rz3q-tnf3-mygj
46
vulnerability VCID-sb76-qn7q-2ben
47
vulnerability VCID-sney-upy2-cub5
48
vulnerability VCID-t3m9-6h7k-9uax
49
vulnerability VCID-tdw3-fns6-6baz
50
vulnerability VCID-u197-te8d-jydm
51
vulnerability VCID-vfkq-sva3-nybz
52
vulnerability VCID-w1s8-6nq3-4bgp
53
vulnerability VCID-xftt-xdnj-fuhd
54
vulnerability VCID-yv3z-fhhz-9fa4
55
vulnerability VCID-z8wr-n2z5-pffq
56
vulnerability VCID-zfuy-5852-fug5
57
vulnerability VCID-zj5j-12r4-4bhp
58
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0
aliases CVE-2021-41208, GHSA-57wx-m983-2f88, PYSEC-2021-400, PYSEC-2021-617, PYSEC-2021-815
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y5ak-4gg9-sqaj
130
url VCID-yp3u-58s2-wuh6
vulnerability_id VCID-yp3u-58s2-wuh6
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-595.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-595.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-793.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-793.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-304.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-304.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/depthwise_conv.cc#L198-L200
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/depthwise_conv.cc#L198-L200
5
reference_url https://github.com/tensorflow/tensorflow/commit/4a91f2069f7145aab6ba2d8cfe41be8a110c18a5
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/4a91f2069f7145aab6ba2d8cfe41be8a110c18a5
6
reference_url https://github.com/tensorflow/tensorflow/commit/537bc7c723439b9194a358f64d871dd326c18887
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/537bc7c723439b9194a358f64d871dd326c18887
7
reference_url https://github.com/tensorflow/tensorflow/commit/8933b8a21280696ab119b63263babdb54c298538
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/8933b8a21280696ab119b63263babdb54c298538
8
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4c4g-crqm-xrxw
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4c4g-crqm-xrxw
9
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37682
reference_id CVE-2021-37682
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37682
11
reference_url https://github.com/advisories/GHSA-4c4g-crqm-xrxw
reference_id GHSA-4c4g-crqm-xrxw
reference_type
scores
url https://github.com/advisories/GHSA-4c4g-crqm-xrxw
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37682, GHSA-4c4g-crqm-xrxw, PYSEC-2021-304, PYSEC-2021-595, PYSEC-2021-793
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yp3u-58s2-wuh6
131
url VCID-ypp9-9yup-33h6
vulnerability_id VCID-ypp9-9yup-33h6
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-576.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-576.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-774.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-774.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-285.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-285.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/6da6620efad397c85493b8f8667b821403516708
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/6da6620efad397c85493b8f8667b821403516708
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g25h-jr74-qp5j
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g25h-jr74-qp5j
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37663
reference_id CVE-2021-37663
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37663
8
reference_url https://github.com/advisories/GHSA-g25h-jr74-qp5j
reference_id GHSA-g25h-jr74-qp5j
reference_type
scores
url https://github.com/advisories/GHSA-g25h-jr74-qp5j
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37663, GHSA-g25h-jr74-qp5j, PYSEC-2021-285, PYSEC-2021-576, PYSEC-2021-774
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ypp9-9yup-33h6
132
url VCID-yv3z-fhhz-9fa4
vulnerability_id VCID-yv3z-fhhz-9fa4
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateOutputSize` is vulnerable to an integer overflow if an attacker can create an operation which would involve tensors with large enough number of elements. We can have a large enough number of dimensions in `output_shape.dim()` or just a small number of dimensions being large enough to cause an overflow in the multiplication. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-85.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-85.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-140.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-140.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L1598-L1617
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L1598-L1617
4
reference_url https://github.com/tensorflow/tensorflow/commit/b9bd6cfd1c50e6807846af9a86f9b83cafc9c8ae
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/b9bd6cfd1c50e6807846af9a86f9b83cafc9c8ae
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wm93-f238-7v37
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wm93-f238-7v37
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23576
reference_id CVE-2022-23576
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23576
7
reference_url https://github.com/advisories/GHSA-wm93-f238-7v37
reference_id GHSA-wm93-f238-7v37
reference_type
scores
url https://github.com/advisories/GHSA-wm93-f238-7v37
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23576, GHSA-wm93-f238-7v37, PYSEC-2022-140, PYSEC-2022-85
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yv3z-fhhz-9fa4
133
url VCID-yy39-1a1s-sqe4
vulnerability_id VCID-yy39-1a1s-sqe4
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-579.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-579.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-777.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-777.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-288.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-288.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/be7a4de6adfbd303ce08be4332554dff70362612
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/be7a4de6adfbd303ce08be4332554dff70362612
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w4xf-2pqw-5mq7
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w4xf-2pqw-5mq7
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37666
reference_id CVE-2021-37666
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37666
8
reference_url https://github.com/advisories/GHSA-w4xf-2pqw-5mq7
reference_id GHSA-w4xf-2pqw-5mq7
reference_type
scores
url https://github.com/advisories/GHSA-w4xf-2pqw-5mq7
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37666, GHSA-w4xf-2pqw-5mq7, PYSEC-2021-288, PYSEC-2021-579, PYSEC-2021-777
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yy39-1a1s-sqe4
134
url VCID-z8wr-n2z5-pffq
vulnerability_id VCID-z8wr-n2z5-pffq
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalAvgPoolGrad` does not consider cases where the input tensors are invalid allowing an attacker to read from outside of bounds of heap. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-54.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-54.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-109.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-109.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/fractional_avg_pool_op.cc#L209-L360
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/fractional_avg_pool_op.cc#L209-L360
4
reference_url https://github.com/tensorflow/tensorflow/commit/002408c3696b173863228223d535f9de72a101a9
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/002408c3696b173863228223d535f9de72a101a9
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vjg4-v33c-ggc4
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vjg4-v33c-ggc4
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21730
reference_id CVE-2022-21730
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21730
7
reference_url https://github.com/advisories/GHSA-vjg4-v33c-ggc4
reference_id GHSA-vjg4-v33c-ggc4
reference_type
scores
url https://github.com/advisories/GHSA-vjg4-v33c-ggc4
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21730, GHSA-vjg4-v33c-ggc4, PYSEC-2022-109, PYSEC-2022-54
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z8wr-n2z5-pffq
135
url VCID-zcdc-4zmj-syct
vulnerability_id VCID-zcdc-4zmj-syct
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-578.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-578.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-776.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-776.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-287.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-287.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/203214568f5bc237603dbab6e1fd389f1572f5c9
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/203214568f5bc237603dbab6e1fd389f1572f5c9
5
reference_url https://github.com/tensorflow/tensorflow/commit/9e62869465573cb2d9b5053f1fa02a81fce21d69
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/9e62869465573cb2d9b5053f1fa02a81fce21d69
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v82p-hv3v-p6qp
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v82p-hv3v-p6qp
7
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37665
reference_id CVE-2021-37665
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37665
9
reference_url https://github.com/advisories/GHSA-v82p-hv3v-p6qp
reference_id GHSA-v82p-hv3v-p6qp
reference_type
scores
url https://github.com/advisories/GHSA-v82p-hv3v-p6qp
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37665, GHSA-v82p-hv3v-p6qp, PYSEC-2021-287, PYSEC-2021-578, PYSEC-2021-776
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zcdc-4zmj-syct
136
url VCID-zfuy-5852-fug5
vulnerability_id VCID-zfuy-5852-fug5
summary Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a denial of service via `CHECK`-fails (i.e., assertion failures). This is similar to TFSA-2021-198 and has similar fixes. We have patched the reported issues in multiple GitHub commits. It is possible that other similar instances exist in TensorFlow, we will issue fixes as these are discovered. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-78.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-78.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-133.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-133.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md
4
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qj5r-f9mv-rffh
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qj5r-f9mv-rffh
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23569
reference_id CVE-2022-23569
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23569
6
reference_url https://github.com/advisories/GHSA-qj5r-f9mv-rffh
reference_id GHSA-qj5r-f9mv-rffh
reference_type
scores
url https://github.com/advisories/GHSA-qj5r-f9mv-rffh
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23569, GHSA-qj5r-f9mv-rffh, PYSEC-2022-133, PYSEC-2022-78
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zfuy-5852-fug5
137
url VCID-zj5j-12r4-4bhp
vulnerability_id VCID-zj5j-12r4-4bhp
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseTensorSliceDataset` has an undefined behavior: under certain condition it can be made to dereference a `nullptr` value. The 3 input arguments to `SparseTensorSliceDataset` represent a sparse tensor. However, there are some preconditions that these arguments must satisfy but these are not validated in the implementation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-60.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-60.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-115.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-115.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/data/sparse_tensor_slice_dataset_op.cc#L227-L292
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/data/sparse_tensor_slice_dataset_op.cc#L227-L292
4
reference_url https://github.com/tensorflow/tensorflow/commit/965b97e4a9650495cda5a8c210ef6684b4b9eceb
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/965b97e4a9650495cda5a8c210ef6684b4b9eceb
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pfjj-m3jj-9jc9
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pfjj-m3jj-9jc9
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-21736
reference_id CVE-2022-21736
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-21736
7
reference_url https://github.com/advisories/GHSA-pfjj-m3jj-9jc9
reference_id GHSA-pfjj-m3jj-9jc9
reference_type
scores
url https://github.com/advisories/GHSA-pfjj-m3jj-9jc9
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-21736, GHSA-pfjj-m3jj-9jc9, PYSEC-2022-115, PYSEC-2022-60
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zj5j-12r4-4bhp
138
url VCID-zmpk-rg58-t3g6
vulnerability_id VCID-zmpk-rg58-t3g6
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-552.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-552.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-750.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-750.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-261.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-261.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/9e82dce6e6bd1f36a57e08fa85af213e2b2f2622
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/9e82dce6e6bd1f36a57e08fa85af213e2b2f2622
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh6x-4whr-2qv4
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh6x-4whr-2qv4
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37639
reference_id CVE-2021-37639
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37639
8
reference_url https://github.com/advisories/GHSA-gh6x-4whr-2qv4
reference_id GHSA-gh6x-4whr-2qv4
reference_type
scores
url https://github.com/advisories/GHSA-gh6x-4whr-2qv4
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37639, GHSA-gh6x-4whr-2qv4, PYSEC-2021-261, PYSEC-2021-552, PYSEC-2021-750
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zmpk-rg58-t3g6
139
url VCID-zsqp-n2df-3fcm
vulnerability_id VCID-zsqp-n2df-3fcm
summary multiple issues
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-570.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-570.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-768.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-768.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-279.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-279.yaml
3
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
4
reference_url https://github.com/tensorflow/tensorflow/commit/f2a673bd34f0d64b8e40a551ac78989d16daad09
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/f2a673bd34f0d64b8e40a551ac78989d16daad09
5
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5xwc-mrhx-5g3m
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5xwc-mrhx-5g3m
6
reference_url https://security.archlinux.org/AVG-2292
reference_id AVG-2292
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2292
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37657
reference_id CVE-2021-37657
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-37657
8
reference_url https://github.com/advisories/GHSA-5xwc-mrhx-5g3m
reference_id GHSA-5xwc-mrhx-5g3m
reference_type
scores
url https://github.com/advisories/GHSA-5xwc-mrhx-5g3m
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.1
purl pkg:pypi/tensorflow-cpu@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-217a-71wn-nybg
1
vulnerability VCID-2hj4-bbfq-xqfj
2
vulnerability VCID-2sak-438s-bbg8
3
vulnerability VCID-2t7w-zpd8-suc9
4
vulnerability VCID-3y5w-424q-8qcn
5
vulnerability VCID-4n1w-zfpr-dugh
6
vulnerability VCID-56kw-66kj-1kb7
7
vulnerability VCID-5781-vzmv-rkg4
8
vulnerability VCID-5j3t-baqf-dbhs
9
vulnerability VCID-65fu-yg2h-zycr
10
vulnerability VCID-68ym-s45d-8bhk
11
vulnerability VCID-6bgf-h7cu-27ec
12
vulnerability VCID-6jvw-p6me-mke6
13
vulnerability VCID-6nfa-78eb-jffv
14
vulnerability VCID-6set-8e9p-nyeu
15
vulnerability VCID-6wh3-uhcu-jqef
16
vulnerability VCID-6xhv-euz8-zkc8
17
vulnerability VCID-6yd6-npyx-93cx
18
vulnerability VCID-76t8-h98v-buhf
19
vulnerability VCID-7avd-xuag-ybbv
20
vulnerability VCID-7gat-e8qw-e7hd
21
vulnerability VCID-7jup-pyyw-c3eg
22
vulnerability VCID-7rgb-m55r-4yhr
23
vulnerability VCID-7z58-8eek-3fg2
24
vulnerability VCID-85jp-mtkt-6kb1
25
vulnerability VCID-87r3-u8t5-m7d2
26
vulnerability VCID-8b1b-hevb-cqht
27
vulnerability VCID-8bz4-tb8u-ckdy
28
vulnerability VCID-af9s-d9qq-tuh7
29
vulnerability VCID-at48-mrdj-a3en
30
vulnerability VCID-au3q-9qpz-pkgy
31
vulnerability VCID-bgt5-979r-auc5
32
vulnerability VCID-bh5b-u3zt-puf9
33
vulnerability VCID-bmvq-fjkr-2fc3
34
vulnerability VCID-bvuf-q5tx-x3ec
35
vulnerability VCID-c5wa-uqe8-yqh1
36
vulnerability VCID-cswq-zynn-h7ct
37
vulnerability VCID-d3qq-2w3d-dqe8
38
vulnerability VCID-dcp4-adwb-efd7
39
vulnerability VCID-ffnh-y8v7-9yg7
40
vulnerability VCID-g3tv-ra2y-hqdn
41
vulnerability VCID-g5tz-zaxw-cfa2
42
vulnerability VCID-g7mk-ddes-8fa8
43
vulnerability VCID-h638-b3zk-wqfa
44
vulnerability VCID-jgpf-xs7n-sbcn
45
vulnerability VCID-jhq5-zhxm-a3ef
46
vulnerability VCID-jpzs-vcck-6kce
47
vulnerability VCID-k9e7-kmzx-wqbn
48
vulnerability VCID-kq2a-p2fu-n7gc
49
vulnerability VCID-me54-9e62-qfdt
50
vulnerability VCID-mgvb-rccx-ffbz
51
vulnerability VCID-mka4-sg7r-v3am
52
vulnerability VCID-n8yf-dh79-83gt
53
vulnerability VCID-ngd2-qzsa-ubdv
54
vulnerability VCID-nu75-chwt-fkdp
55
vulnerability VCID-p2z3-j6kf-p3dd
56
vulnerability VCID-psey-gff8-nyg8
57
vulnerability VCID-pve4-4466-tqah
58
vulnerability VCID-qe3m-tepe-sqbq
59
vulnerability VCID-r184-6v15-tqgm
60
vulnerability VCID-rapw-1955-2ydq
61
vulnerability VCID-rgat-jz7g-5qgd
62
vulnerability VCID-rz3q-tnf3-mygj
63
vulnerability VCID-sb76-qn7q-2ben
64
vulnerability VCID-sney-upy2-cub5
65
vulnerability VCID-t3m9-6h7k-9uax
66
vulnerability VCID-tdw3-fns6-6baz
67
vulnerability VCID-tf8j-fa4n-2qcy
68
vulnerability VCID-ty1g-525f-jkan
69
vulnerability VCID-u197-te8d-jydm
70
vulnerability VCID-uqae-1yv2-fuc2
71
vulnerability VCID-v7xq-gfna-5kfw
72
vulnerability VCID-vfkq-sva3-nybz
73
vulnerability VCID-vsxn-sk73-dbg5
74
vulnerability VCID-w1s8-6nq3-4bgp
75
vulnerability VCID-wdpc-4xjf-pqgh
76
vulnerability VCID-wskj-uyt9-akab
77
vulnerability VCID-xdz6-2ckp-a3dw
78
vulnerability VCID-xftt-xdnj-fuhd
79
vulnerability VCID-y5ak-4gg9-sqaj
80
vulnerability VCID-yv3z-fhhz-9fa4
81
vulnerability VCID-z8wr-n2z5-pffq
82
vulnerability VCID-zfuy-5852-fug5
83
vulnerability VCID-zj5j-12r4-4bhp
84
vulnerability VCID-zztr-pqqn-w7fd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.1
aliases CVE-2021-37657, GHSA-5xwc-mrhx-5g3m, PYSEC-2021-279, PYSEC-2021-570, PYSEC-2021-768
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zsqp-n2df-3fcm
140
url VCID-zztr-pqqn-w7fd
vulnerability_id VCID-zztr-pqqn-w7fd
summary Tensorflow is an Open Source Machine Learning Framework. The implementation of `Range` suffers from integer overflows. These can trigger undefined behavior or, in some scenarios, extremely large allocations. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
references
0
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-71.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-71.yaml
1
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-126.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-126.yaml
2
reference_url https://github.com/tensorflow/tensorflow
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow
3
reference_url https://github.com/tensorflow/tensorflow/commit/f0147751fd5d2ff23251149ebad9af9f03010732
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/commit/f0147751fd5d2ff23251149ebad9af9f03010732
4
reference_url https://github.com/tensorflow/tensorflow/issues/52676
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/issues/52676
5
reference_url https://github.com/tensorflow/tensorflow/pull/51733
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/pull/51733
6
reference_url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qx3f-p745-w4hr
reference_id
reference_type
scores
url https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qx3f-p745-w4hr
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23562
reference_id CVE-2022-23562
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-23562
8
reference_url https://github.com/advisories/GHSA-qx3f-p745-w4hr
reference_id GHSA-qx3f-p745-w4hr
reference_type
scores
url https://github.com/advisories/GHSA-qx3f-p745-w4hr
fixed_packages
0
url pkg:pypi/tensorflow-cpu@2.5.3
purl pkg:pypi/tensorflow-cpu@2.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.3
1
url pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g5tz-zaxw-cfa2
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.6.3
2
url pkg:pypi/tensorflow-cpu@2.7.1
purl pkg:pypi/tensorflow-cpu@2.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d3k4-z4f1-hfhy
1
vulnerability VCID-hcud-kg7b-zyhx
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1
aliases CVE-2022-23562, GHSA-qx3f-p745-w4hr, PYSEC-2022-126, PYSEC-2022-71
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zztr-pqqn-w7fd
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.5.0