Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-35958

Progress 0 / 0

Advisory Summaries

gitlab/pypi/tensorflow-cpu/CVE-2021-35958

Exposure of Resource to Wrong Sphere TensorFlow allows attackers to overwrite arbitrary files via a crafted archive when `tf.keras.utils.get_file` is used with `extract=True`. NOTE: the vendor's position is that `tf.keras.utils.get_file` is not intended for untrusted archives.

gitlab/pypi/tensorflow/CVE-2021-35958

Exposure of Resource to Wrong Sphere TensorFlow allows attackers to overwrite arbitrary files via a crafted archive when `tf.keras.utils.get_file` is used with `extract=True`. NOTE: the vendor's position is that `tf.keras.utils.get_file` is not intended for untrusted archives.

gitlab/pypi/tensorflow-gpu/CVE-2021-35958

Exposure of Resource to Wrong Sphere TensorFlow allows attackers to overwrite arbitrary files via a crafted archive when `tf.keras.utils.get_file` is used with `extract=True`. NOTE: the vendor's position is that `tf.keras.utils.get_file` is not intended for untrusted archives.