Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.tensorflow/parentpom@1.7.0
purl pkg:maven/org.tensorflow/parentpom@1.7.0
Next non-vulnerable version 1.7.1
Latest non-vulnerable version 1.8.0
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-fjh5-fxj2-e3ap
Aliases:
CVE-2018-8825
GHSA-frxx-2m33-6wcr
PYSEC-2019-208
PYSEC-2019-226
PYSEC-2019-233
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local).
1.8.0
Affected by 0 other vulnerabilities.
VCID-qcq3-q226-u7gn
Aliases:
CVE-2018-7575
GHSA-mw6v-crh8-8533
PYSEC-2019-205
PYSEC-2019-223
PYSEC-2019-230
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent.
1.8.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-u9fu-9zvx-rfhj Out-of-bounds Read Google TensorFlow is affected by a Null Pointer Dereference vulnerability. CVE-2018-7574
VCID-y7rd-3fhm-2qd5 Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent. CVE-2018-7576
GHSA-jfq2-rj7f-9gvf
PYSEC-2019-206
PYSEC-2019-224
PYSEC-2019-231