Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/23634?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/23634?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0rc0", "type": "pypi", "namespace": "", "name": "tensorflow-gpu", "version": "2.7.0rc0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200992?format=api", "vulnerability_id": "VCID-15h4-876j-3bdz", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35970", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35970" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:35Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35970", "reference_id": "CVE-2022-35970", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35970" }, { "reference_url": "https://github.com/advisories/GHSA-g35r-369w-3fqp", "reference_id": "GHSA-g35r-369w-3fqp", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-g35r-369w-3fqp" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g35r-369w-3fqp", "reference_id": "GHSA-g35r-369w-3fqp", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:35Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g35r-369w-3fqp" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35970", "GHSA-g35r-369w-3fqp" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-15h4-876j-3bdz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3227?format=api", "vulnerability_id": "VCID-1sr1-happ-6ugc", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41221", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.06058", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41221" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-630.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-630.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-828.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-828.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-413.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-413.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/af5fcebb37c8b5d71c237f4e59c6477015c78ce6", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/af5fcebb37c8b5d71c237f4e59c6477015c78ce6" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cqv6-3phm-hcwx", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cqv6-3phm-hcwx" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41221", "reference_id": "CVE-2021-41221", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41221" }, { "reference_url": "https://github.com/advisories/GHSA-cqv6-3phm-hcwx", "reference_id": "GHSA-cqv6-3phm-hcwx", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cqv6-3phm-hcwx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41221", "CVE-2021-41221", "GHSA-cqv6-3phm-hcwx", "PYSEC-2021-413", "PYSEC-2021-630", "PYSEC-2021-828" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1sr1-happ-6ugc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205533?format=api", "vulnerability_id": "VCID-1vxc-sbk4-77ef", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41896", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00187", "scoring_system": "epss", "scoring_elements": "0.40259", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41896" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/mirror_pad_op.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:05Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/mirror_pad_op.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/39ec7eaf1428e90c37787e5b3fbd68ebd3c48860", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:05Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/39ec7eaf1428e90c37787e5b3fbd68ebd3c48860" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41896", "reference_id": "CVE-2022-41896", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41896" }, { "reference_url": "https://github.com/advisories/GHSA-rmg2-f698-wq35", "reference_id": "GHSA-rmg2-f698-wq35", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rmg2-f698-wq35" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rmg2-f698-wq35", "reference_id": "GHSA-rmg2-f698-wq35", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:05Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rmg2-f698-wq35" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41896", "GHSA-rmg2-f698-wq35" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1vxc-sbk4-77ef" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200982?format=api", "vulnerability_id": "VCID-1w3g-z5ja-q7cr", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35960", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00208", "scoring_system": "epss", "scoring_elements": "0.43231", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35960" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/c8ba76d48567aed347508e0552a257641931024d/tensorflow/core/kernels/list_kernels.cc#L322-L325", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:55Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/c8ba76d48567aed347508e0552a257641931024d/tensorflow/core/kernels/list_kernels.cc#L322-L325" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/b5f6fbfba76576202b72119897561e3bd4f179c7", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:55Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/b5f6fbfba76576202b72119897561e3bd4f179c7" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35960", "reference_id": "CVE-2022-35960", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35960" }, { "reference_url": "https://github.com/advisories/GHSA-v5xg-3q2c-c2r4", "reference_id": "GHSA-v5xg-3q2c-c2r4", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-v5xg-3q2c-c2r4" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v5xg-3q2c-c2r4", "reference_id": "GHSA-v5xg-3q2c-c2r4", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:55Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v5xg-3q2c-c2r4" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35960", "GHSA-v5xg-3q2c-c2r4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1w3g-z5ja-q7cr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201021?format=api", "vulnerability_id": "VCID-21pb-qyv3-27cj", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35999", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35999" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/27a65a43cf763897fecfa5cdb5cc653fc5dd0346", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:14Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/27a65a43cf763897fecfa5cdb5cc653fc5dd0346" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35999", "reference_id": "CVE-2022-35999", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35999" }, { "reference_url": "https://github.com/advisories/GHSA-37jf-mjv6-xfqw", "reference_id": "GHSA-37jf-mjv6-xfqw", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-37jf-mjv6-xfqw" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-37jf-mjv6-xfqw", "reference_id": "GHSA-37jf-mjv6-xfqw", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:14Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-37jf-mjv6-xfqw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35999", "GHSA-37jf-mjv6-xfqw" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-21pb-qyv3-27cj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200996?format=api", "vulnerability_id": "VCID-2311-hknw-2ubh", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35974", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35974" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/73ad1815ebcfeb7c051f9c2f7ab5024380ca8613", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:22Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/73ad1815ebcfeb7c051f9c2f7ab5024380ca8613" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35974", "reference_id": "CVE-2022-35974", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35974" }, { "reference_url": "https://github.com/advisories/GHSA-vgvh-2pf4-jr2x", "reference_id": "GHSA-vgvh-2pf4-jr2x", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vgvh-2pf4-jr2x" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vgvh-2pf4-jr2x", "reference_id": "GHSA-vgvh-2pf4-jr2x", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:22Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vgvh-2pf4-jr2x" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35974", "GHSA-vgvh-2pf4-jr2x" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2311-hknw-2ubh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3231?format=api", "vulnerability_id": "VCID-2cw7-2xzs-abfz", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41217", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04734", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41217" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-626.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-626.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-824.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-824.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-409.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-409.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/05cbebd3c6bb8f517a158b0155debb8df79017ff", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/05cbebd3c6bb8f517a158b0155debb8df79017ff" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5crj-c72x-m7gq", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5crj-c72x-m7gq" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41217", "reference_id": "CVE-2021-41217", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41217" }, { "reference_url": "https://github.com/advisories/GHSA-5crj-c72x-m7gq", "reference_id": "GHSA-5crj-c72x-m7gq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5crj-c72x-m7gq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41217", "CVE-2021-41217", "GHSA-5crj-c72x-m7gq", "PYSEC-2021-409", "PYSEC-2021-626", "PYSEC-2021-824" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2cw7-2xzs-abfz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3250?format=api", "vulnerability_id": "VCID-2hqc-3d51-4yf5", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41198", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00049", "scoring_system": "epss", "scoring_elements": "0.15708", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41198" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-608.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-608.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-806.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-806.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-391.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-391.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/9294094df6fea79271778eb7e7ae1bad8b5ef98f", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/9294094df6fea79271778eb7e7ae1bad8b5ef98f" }, { "reference_url": "https://github.com/tensorflow/tensorflow/issues/46911", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/issues/46911" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2p25-55c9-h58q", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2p25-55c9-h58q" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41198", "reference_id": "CVE-2021-41198", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41198" }, { "reference_url": "https://github.com/advisories/GHSA-2p25-55c9-h58q", "reference_id": "GHSA-2p25-55c9-h58q", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2p25-55c9-h58q" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41198", "CVE-2021-41198", "GHSA-2p25-55c9-h58q", "PYSEC-2021-391", "PYSEC-2021-608", "PYSEC-2021-806" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2hqc-3d51-4yf5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17162?format=api", "vulnerability_id": "VCID-2vyy-ktxf-y7hj", "summary": "Incorrect Comparison\nTensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a floating point exception in AudioSpectrogram. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25666", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00054", "scoring_system": "epss", "scoring_elements": "0.17117", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25666" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/d0d4e779da0d0f56499c6fa5ba09f0a576cc6b14", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:40:27Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/d0d4e779da0d0f56499c6fa5ba09f0a576cc6b14" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25666", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25666" }, { "reference_url": "https://github.com/advisories/GHSA-f637-vh3r-vfh2", "reference_id": "GHSA-f637-vh3r-vfh2", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f637-vh3r-vfh2" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f637-vh3r-vfh2", "reference_id": "GHSA-f637-vh3r-vfh2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:40:27Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f637-vh3r-vfh2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25666", "GHSA-f637-vh3r-vfh2" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2vyy-ktxf-y7hj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201018?format=api", "vulnerability_id": "VCID-32uz-pmsu-dycn", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35996", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35996" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/611d80db29dd7b0cfb755772c69d60ae5bca05f9", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/611d80db29dd7b0cfb755772c69d60ae5bca05f9" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35996", "reference_id": "CVE-2022-35996", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35996" }, { "reference_url": "https://github.com/advisories/GHSA-q5jv-m6qw-5g37", "reference_id": "GHSA-q5jv-m6qw-5g37", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-q5jv-m6qw-5g37" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q5jv-m6qw-5g37", "reference_id": "GHSA-q5jv-m6qw-5g37", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q5jv-m6qw-5g37" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35996", "GHSA-q5jv-m6qw-5g37" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-32uz-pmsu-dycn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201040?format=api", "vulnerability_id": "VCID-3dun-j9ep-3ugk", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36018", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36018" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/88f93dfe691563baa4ae1e80ccde2d5c7a143821", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:46Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/88f93dfe691563baa4ae1e80ccde2d5c7a143821" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36018", "reference_id": "CVE-2022-36018", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36018" }, { "reference_url": "https://github.com/advisories/GHSA-m6cv-4fmf-66xf", "reference_id": "GHSA-m6cv-4fmf-66xf", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m6cv-4fmf-66xf" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m6cv-4fmf-66xf", "reference_id": "GHSA-m6cv-4fmf-66xf", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:46Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m6cv-4fmf-66xf" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36018", "GHSA-m6cv-4fmf-66xf" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3dun-j9ep-3ugk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205537?format=api", "vulnerability_id": "VCID-3erq-zcrk-qqaf", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41900", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01243", "scoring_system": "epss", "scoring_elements": "0.79594", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41900" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/216525144ee7c910296f5b05d214ca1327c9ce48", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/216525144ee7c910296f5b05d214ca1327c9ce48" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41900", "reference_id": "CVE-2022-41900", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41900" }, { "reference_url": "https://github.com/advisories/GHSA-xvwp-h6jv-7472", "reference_id": "GHSA-xvwp-h6jv-7472", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xvwp-h6jv-7472" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xvwp-h6jv-7472", "reference_id": "GHSA-xvwp-h6jv-7472", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xvwp-h6jv-7472" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41900", "GHSA-xvwp-h6jv-7472" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3erq-zcrk-qqaf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205535?format=api", "vulnerability_id": "VCID-3esk-gwz9-wfa4", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41898", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00187", "scoring_system": "epss", "scoring_elements": "0.40259", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41898" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/sparse_fill_empty_rows_op_gpu.cu.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:56Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/sparse_fill_empty_rows_op_gpu.cu.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/af4a6a3c8b95022c351edae94560acc61253a1b8", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:56Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/af4a6a3c8b95022c351edae94560acc61253a1b8" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41898", "reference_id": "CVE-2022-41898", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41898" }, { "reference_url": "https://github.com/advisories/GHSA-hq7g-wwwp-q46h", "reference_id": "GHSA-hq7g-wwwp-q46h", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hq7g-wwwp-q46h" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hq7g-wwwp-q46h", "reference_id": "GHSA-hq7g-wwwp-q46h", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:56Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hq7g-wwwp-q46h" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41898", "GHSA-hq7g-wwwp-q46h" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3esk-gwz9-wfa4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201019?format=api", "vulnerability_id": "VCID-3fd6-8rv4-8qh3", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35997", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00047", "scoring_system": "epss", "scoring_elements": "0.1484", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35997" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/83dcb4dbfa094e33db084e97c4d0531a559e0ebf", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/83dcb4dbfa094e33db084e97c4d0531a559e0ebf" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35997", "reference_id": "CVE-2022-35997", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35997" }, { "reference_url": "https://github.com/advisories/GHSA-p7hr-f446-x6qf", "reference_id": "GHSA-p7hr-f446-x6qf", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-p7hr-f446-x6qf" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-p7hr-f446-x6qf", "reference_id": "GHSA-p7hr-f446-x6qf", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-p7hr-f446-x6qf" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35997", "GHSA-p7hr-f446-x6qf" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3fd6-8rv4-8qh3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205532?format=api", "vulnerability_id": "VCID-3s87-vf5k-cycp", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41895", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0015", "scoring_system": "epss", "scoring_elements": "0.35228", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41895" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/mirror_pad_op.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/mirror_pad_op.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/717ca98d8c3bba348ff62281fdf38dcb5ea1ec92", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/717ca98d8c3bba348ff62281fdf38dcb5ea1ec92" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41895", "reference_id": "CVE-2022-41895", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41895" }, { "reference_url": "https://github.com/advisories/GHSA-gq2j-cr96-gvqx", "reference_id": "GHSA-gq2j-cr96-gvqx", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gq2j-cr96-gvqx" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gq2j-cr96-gvqx", "reference_id": "GHSA-gq2j-cr96-gvqx", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gq2j-cr96-gvqx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41895", "GHSA-gq2j-cr96-gvqx" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3s87-vf5k-cycp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17166?format=api", "vulnerability_id": "VCID-3yjn-h25c-v3gb", "summary": "Integer Overflow or Wraparound\nTensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * width * channels < 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25667", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00211", "scoring_system": "epss", "scoring_elements": "0.43588", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25667" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:39:37Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25667", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25667" }, { "reference_url": "https://github.com/advisories/GHSA-fqm2-gh8w-gr68", "reference_id": "GHSA-fqm2-gh8w-gr68", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fqm2-gh8w-gr68" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqm2-gh8w-gr68", "reference_id": "GHSA-fqm2-gh8w-gr68", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:39:37Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqm2-gh8w-gr68" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25667", "GHSA-fqm2-gh8w-gr68" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3yjn-h25c-v3gb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205528?format=api", "vulnerability_id": "VCID-3zd4-d2hc-87at", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41890", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00143", "scoring_system": "epss", "scoring_elements": "0.34344", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41890" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/util/bcast.h", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:20Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/util/bcast.h" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/8310bf8dd188ff780e7fc53245058215a05bdbe5", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:20Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/8310bf8dd188ff780e7fc53245058215a05bdbe5" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41890", "reference_id": "CVE-2022-41890", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41890" }, { "reference_url": "https://github.com/advisories/GHSA-h246-cgh4-7475", "reference_id": "GHSA-h246-cgh4-7475", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-h246-cgh4-7475" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h246-cgh4-7475", "reference_id": "GHSA-h246-cgh4-7475", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:20Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h246-cgh4-7475" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41890", "GHSA-h246-cgh4-7475" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3zd4-d2hc-87at" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201023?format=api", "vulnerability_id": "VCID-4mky-qp2e-vbhg", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36001", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36001" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/da0d65cdc1270038e72157ba35bf74b85d9bda11", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:40Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/da0d65cdc1270038e72157ba35bf74b85d9bda11" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36001", "reference_id": "CVE-2022-36001", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36001" }, { "reference_url": "https://github.com/advisories/GHSA-jqm7-m5q7-3hm5", "reference_id": "GHSA-jqm7-m5q7-3hm5", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-jqm7-m5q7-3hm5" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jqm7-m5q7-3hm5", "reference_id": "GHSA-jqm7-m5q7-3hm5", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:40Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jqm7-m5q7-3hm5" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36001", "GHSA-jqm7-m5q7-3hm5" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4mky-qp2e-vbhg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200991?format=api", "vulnerability_id": "VCID-4sj6-vagv-2qe4", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35969", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35969" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/50156d547b9a1da0144d7babe665cf690305b33c", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:32Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/50156d547b9a1da0144d7babe665cf690305b33c" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35969", "reference_id": "CVE-2022-35969", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35969" }, { "reference_url": "https://github.com/advisories/GHSA-q2c3-jpmc-gfjx", "reference_id": "GHSA-q2c3-jpmc-gfjx", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-q2c3-jpmc-gfjx" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q2c3-jpmc-gfjx", "reference_id": "GHSA-q2c3-jpmc-gfjx", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:32Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q2c3-jpmc-gfjx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35969", "GHSA-q2c3-jpmc-gfjx" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4sj6-vagv-2qe4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200985?format=api", "vulnerability_id": "VCID-4tyf-xfhm-d3cm", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35963", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35963" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/03a659d7be9a1154fdf5eeac221e5950fec07dad", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:53Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/03a659d7be9a1154fdf5eeac221e5950fec07dad" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35963", "reference_id": "CVE-2022-35963", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35963" }, { "reference_url": "https://github.com/advisories/GHSA-84jm-4cf3-9jfm", "reference_id": "GHSA-84jm-4cf3-9jfm", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-84jm-4cf3-9jfm" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-84jm-4cf3-9jfm", "reference_id": "GHSA-84jm-4cf3-9jfm", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:53Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-84jm-4cf3-9jfm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35963", "GHSA-84jm-4cf3-9jfm" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4tyf-xfhm-d3cm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201007?format=api", "vulnerability_id": "VCID-4xpd-4a11-k3b7", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35985", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35985" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/bd90b3efab4ec958b228cd7cfe9125be1c0cf255", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:00Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/bd90b3efab4ec958b228cd7cfe9125be1c0cf255" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35985", "reference_id": "CVE-2022-35985", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35985" }, { "reference_url": "https://github.com/advisories/GHSA-9942-r22v-78cp", "reference_id": "GHSA-9942-r22v-78cp", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9942-r22v-78cp" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9942-r22v-78cp", "reference_id": "GHSA-9942-r22v-78cp", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:00Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9942-r22v-78cp" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35985", "GHSA-9942-r22v-78cp" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4xpd-4a11-k3b7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3239?format=api", "vulnerability_id": "VCID-5d73-819a-xbeg", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41209", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04734", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41209" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-618.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-618.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-816.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-816.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-401.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-401.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hpv-v2rx-c5g6", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hpv-v2rx-c5g6" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41209", "reference_id": "CVE-2021-41209", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41209" }, { "reference_url": "https://github.com/advisories/GHSA-6hpv-v2rx-c5g6", "reference_id": "GHSA-6hpv-v2rx-c5g6", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6hpv-v2rx-c5g6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41209", "CVE-2021-41209", "GHSA-6hpv-v2rx-c5g6", "PYSEC-2021-401", "PYSEC-2021-618", "PYSEC-2021-816" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5d73-819a-xbeg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205527?format=api", "vulnerability_id": "VCID-5f52-bwtt-m3hn", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41889", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00123", "scoring_system": "epss", "scoring_elements": "0.31153", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41889" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/generate_box_proposals_op.cu.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:23Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/generate_box_proposals_op.cu.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/e9e95553e5411834d215e6770c81a83a3d0866ce", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:23Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/e9e95553e5411834d215e6770c81a83a3d0866ce" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41889", "reference_id": "CVE-2022-41889", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41889" }, { "reference_url": "https://github.com/advisories/GHSA-xxcj-rhqg-m46g", "reference_id": "GHSA-xxcj-rhqg-m46g", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xxcj-rhqg-m46g" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xxcj-rhqg-m46g", "reference_id": "GHSA-xxcj-rhqg-m46g", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:23Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xxcj-rhqg-m46g" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41889", "GHSA-xxcj-rhqg-m46g" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5f52-bwtt-m3hn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205524?format=api", "vulnerability_id": "VCID-5m3b-x2b2-nfer", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41886", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0015", "scoring_system": "epss", "scoring_elements": "0.35228", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41886" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/image_ops.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:32Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/image_ops.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/8faa6ea692985dbe6ce10e1a3168e0bd60a723ba", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:32Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/8faa6ea692985dbe6ce10e1a3168e0bd60a723ba" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41886", "reference_id": "CVE-2022-41886", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41886" }, { "reference_url": "https://github.com/advisories/GHSA-54pp-c6pp-7fpx", "reference_id": "GHSA-54pp-c6pp-7fpx", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-54pp-c6pp-7fpx" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-54pp-c6pp-7fpx", "reference_id": "GHSA-54pp-c6pp-7fpx", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:32Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-54pp-c6pp-7fpx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41886", "GHSA-54pp-c6pp-7fpx" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5m3b-x2b2-nfer" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205538?format=api", "vulnerability_id": "VCID-5qwh-rm2h-ekc7", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41901", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0035", "scoring_system": "epss", "scoring_elements": "0.57712", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41901" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/sparse/sparse_matrix.h", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/sparse/sparse_matrix.h" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/f856d02e5322821aad155dad9b3acab1e9f5d693", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/f856d02e5322821aad155dad9b3acab1e9f5d693" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41901", "reference_id": "CVE-2022-41901", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41901" }, { "reference_url": "https://github.com/advisories/GHSA-g9fm-r5mm-rf9f", "reference_id": "GHSA-g9fm-r5mm-rf9f", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-g9fm-r5mm-rf9f" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g9fm-r5mm-rf9f", "reference_id": "GHSA-g9fm-r5mm-rf9f", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g9fm-r5mm-rf9f" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41901", "GHSA-g9fm-r5mm-rf9f" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5qwh-rm2h-ekc7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3234?format=api", "vulnerability_id": "VCID-5ty2-z944-mbht", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41214", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00018", "scoring_system": "epss", "scoring_elements": "0.05281", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41214" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-623.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-623.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-821.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-821.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-406.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-406.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vwhq-49r4-gj9v", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vwhq-49r4-gj9v" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41214", "reference_id": "CVE-2021-41214", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41214" }, { "reference_url": "https://github.com/advisories/GHSA-vwhq-49r4-gj9v", "reference_id": "GHSA-vwhq-49r4-gj9v", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vwhq-49r4-gj9v" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41214", "CVE-2021-41214", "GHSA-vwhq-49r4-gj9v", "PYSEC-2021-406", "PYSEC-2021-623", "PYSEC-2021-821" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5ty2-z944-mbht" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3222?format=api", "vulnerability_id": "VCID-5xgg-h9wh-3uh7", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41226", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00018", "scoring_system": "epss", "scoring_elements": "0.05281", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41226" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-635.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-635.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-833.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-833.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-418.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-418.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/f410212e373eb2aec4c9e60bf3702eba99a38aba", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/f410212e373eb2aec4c9e60bf3702eba99a38aba" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-374m-jm66-3vj8", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-374m-jm66-3vj8" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41226", "reference_id": "CVE-2021-41226", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41226" }, { "reference_url": "https://github.com/advisories/GHSA-374m-jm66-3vj8", "reference_id": "GHSA-374m-jm66-3vj8", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-374m-jm66-3vj8" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41226", "CVE-2021-41226", "GHSA-374m-jm66-3vj8", "PYSEC-2021-418", "PYSEC-2021-635", "PYSEC-2021-833" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5xgg-h9wh-3uh7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201039?format=api", "vulnerability_id": "VCID-62y1-pd1b-vqhr", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36017", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36017" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:57:48Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36017", "reference_id": "CVE-2022-36017", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36017" }, { "reference_url": "https://github.com/advisories/GHSA-wqmc-pm8c-2jhc", "reference_id": "GHSA-wqmc-pm8c-2jhc", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-wqmc-pm8c-2jhc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wqmc-pm8c-2jhc", "reference_id": "GHSA-wqmc-pm8c-2jhc", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:57:48Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wqmc-pm8c-2jhc" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36017", "GHSA-wqmc-pm8c-2jhc" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-62y1-pd1b-vqhr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3225?format=api", "vulnerability_id": "VCID-688g-g33x-67g9", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41223", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00019", "scoring_system": "epss", "scoring_elements": "0.05349", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41223" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-632.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-632.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-830.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-830.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-415.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-415.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/aab9998916c2ffbd8f0592059fad352622f89cda", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/aab9998916c2ffbd8f0592059fad352622f89cda" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f54p-f6jp-4rhr", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f54p-f6jp-4rhr" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41223", "reference_id": "CVE-2021-41223", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41223" }, { "reference_url": "https://github.com/advisories/GHSA-f54p-f6jp-4rhr", "reference_id": "GHSA-f54p-f6jp-4rhr", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f54p-f6jp-4rhr" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41223", "CVE-2021-41223", "GHSA-f54p-f6jp-4rhr", "PYSEC-2021-415", "PYSEC-2021-632", "PYSEC-2021-830" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-688g-g33x-67g9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205530?format=api", "vulnerability_id": "VCID-6apy-b5ev-hkcj", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41893", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00195", "scoring_system": "epss", "scoring_elements": "0.41219", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41893" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:13Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/888e34b49009a4e734c27ab0c43b0b5102682c56", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:13Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/888e34b49009a4e734c27ab0c43b0b5102682c56" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41893", "reference_id": "CVE-2022-41893", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41893" }, { "reference_url": "https://github.com/advisories/GHSA-67pf-62xr-q35m", "reference_id": "GHSA-67pf-62xr-q35m", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-67pf-62xr-q35m" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-67pf-62xr-q35m", "reference_id": "GHSA-67pf-62xr-q35m", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:13Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-67pf-62xr-q35m" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41893", "GHSA-67pf-62xr-q35m" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6apy-b5ev-hkcj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17167?format=api", "vulnerability_id": "VCID-6cr3-ywr5-f7e6", "summary": "Heap-based Buffer Overflow\nTensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be included in TensorFlow version 2.12.0 and will also cherrypick this commit on TensorFlow version 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25668", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01465", "scoring_system": "epss", "scoring_elements": "0.81202", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25668" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/7b174a0f2e40ff3f3aa957aecddfd5aaae35eccb", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-19T20:32:32Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/7b174a0f2e40ff3f3aa957aecddfd5aaae35eccb" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25668", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25668" }, { "reference_url": "https://github.com/advisories/GHSA-gw97-ff7c-9v96", "reference_id": "GHSA-gw97-ff7c-9v96", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gw97-ff7c-9v96" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gw97-ff7c-9v96", "reference_id": "GHSA-gw97-ff7c-9v96", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-19T20:32:32Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gw97-ff7c-9v96" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25668", "GHSA-gw97-ff7c-9v96" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6cr3-ywr5-f7e6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/224122?format=api", "vulnerability_id": "VCID-6nyr-2edx-5qg6", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-33976", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00036", "scoring_system": "epss", "scoring_elements": "0.11264", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-33976" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/6fa05df43b00038b048f4f0e51ef522da6532fec", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T20:13:44Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/6fa05df43b00038b048f4f0e51ef522da6532fec" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/915884fdf5df34aaedd00fc6ace33a2cfdefa586", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T20:13:44Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/915884fdf5df34aaedd00fc6ace33a2cfdefa586" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33976", "reference_id": "CVE-2023-33976", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33976" }, { "reference_url": "https://github.com/advisories/GHSA-gjh7-xx4r-x345", "reference_id": "GHSA-gjh7-xx4r-x345", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gjh7-xx4r-x345" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gjh7-xx4r-x345", "reference_id": "GHSA-gjh7-xx4r-x345", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T20:13:44Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gjh7-xx4r-x345" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/82311?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.1" } ], "aliases": [ "CVE-2023-33976", "GHSA-gjh7-xx4r-x345" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6nyr-2edx-5qg6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205525?format=api", "vulnerability_id": "VCID-77cw-2wuq-nued", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41887", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.34019", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41887" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/cwise_ops_common.h", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:29Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/cwise_ops_common.h" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/python/keras/losses.py", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:29Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/python/keras/losses.py" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/c5b30379ba87cbe774b08ac50c1f6d36df4ebb7c", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:29Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/c5b30379ba87cbe774b08ac50c1f6d36df4ebb7c" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41887", "reference_id": "CVE-2022-41887", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41887" }, { "reference_url": "https://github.com/advisories/GHSA-8fvv-46hw-vpg3", "reference_id": "GHSA-8fvv-46hw-vpg3", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8fvv-46hw-vpg3" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8fvv-46hw-vpg3", "reference_id": "GHSA-8fvv-46hw-vpg3", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:29Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8fvv-46hw-vpg3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41887", "GHSA-8fvv-46hw-vpg3" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-77cw-2wuq-nued" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201033?format=api", "vulnerability_id": "VCID-7cu6-jt1f-q7hq", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36011", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22634", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36011" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/1cf45b831eeb0cab8655c9c7c5d06ec6f45fc41b", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/1cf45b831eeb0cab8655c9c7c5d06ec6f45fc41b" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36011", "reference_id": "CVE-2022-36011", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36011" }, { "reference_url": "https://github.com/advisories/GHSA-fv43-93gv-vm8f", "reference_id": "GHSA-fv43-93gv-vm8f", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fv43-93gv-vm8f" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fv43-93gv-vm8f", "reference_id": "GHSA-fv43-93gv-vm8f", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fv43-93gv-vm8f" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36011", "GHSA-fv43-93gv-vm8f" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7cu6-jt1f-q7hq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205536?format=api", "vulnerability_id": "VCID-7guk-jpt3-eka8", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41899", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00187", "scoring_system": "epss", "scoring_elements": "0.40259", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41899" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/sdca_internal.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:53Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/sdca_internal.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/80ff197d03db2a70c6a111f97dcdacad1b0babfa", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:53Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/80ff197d03db2a70c6a111f97dcdacad1b0babfa" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41899", "reference_id": "CVE-2022-41899", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41899" }, { "reference_url": "https://github.com/advisories/GHSA-27rc-728f-x5w2", "reference_id": "GHSA-27rc-728f-x5w2", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-27rc-728f-x5w2" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27rc-728f-x5w2", "reference_id": "GHSA-27rc-728f-x5w2", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:53Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27rc-728f-x5w2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41899", "GHSA-27rc-728f-x5w2" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7guk-jpt3-eka8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201004?format=api", "vulnerability_id": "VCID-7nkk-5pdm-uyck", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35982", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35982" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/40adbe4dd15b582b0210dfbf40c243a62f5119fa", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:14Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/40adbe4dd15b582b0210dfbf40c243a62f5119fa" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35982", "reference_id": "CVE-2022-35982", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35982" }, { "reference_url": "https://github.com/advisories/GHSA-397c-5g2j-qxpv", "reference_id": "GHSA-397c-5g2j-qxpv", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-397c-5g2j-qxpv" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-397c-5g2j-qxpv", "reference_id": "GHSA-397c-5g2j-qxpv", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:14Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-397c-5g2j-qxpv" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35982", "GHSA-397c-5g2j-qxpv" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7nkk-5pdm-uyck" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200989?format=api", "vulnerability_id": "VCID-83t5-dg3c-5qa2", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35967", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35967" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/49b3824d83af706df0ad07e4e677d88659756d89", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:44Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/49b3824d83af706df0ad07e4e677d88659756d89" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35967", "reference_id": "CVE-2022-35967", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35967" }, { "reference_url": "https://github.com/advisories/GHSA-v6h3-348g-6h5x", "reference_id": "GHSA-v6h3-348g-6h5x", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-v6h3-348g-6h5x" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v6h3-348g-6h5x", "reference_id": "GHSA-v6h3-348g-6h5x", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:44Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v6h3-348g-6h5x" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35967", "GHSA-v6h3-348g-6h5x" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-83t5-dg3c-5qa2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17161?format=api", "vulnerability_id": "VCID-8dhx-4a17-rbcj", "summary": "NULL Pointer Dereference\nTensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25670", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0024", "scoring_system": "epss", "scoring_elements": "0.47215", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25670" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/8a47a39d9697969206d23a523c977238717e8727", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:41:15Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/8a47a39d9697969206d23a523c977238717e8727" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25670", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25670" }, { "reference_url": "https://github.com/advisories/GHSA-49rq-hwc3-x77w", "reference_id": "GHSA-49rq-hwc3-x77w", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-49rq-hwc3-x77w" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rq-hwc3-x77w", "reference_id": "GHSA-49rq-hwc3-x77w", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:41:15Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rq-hwc3-x77w" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25670", "GHSA-49rq-hwc3-x77w" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8dhx-4a17-rbcj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201034?format=api", "vulnerability_id": "VCID-8dwk-hykt-93a5", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36012", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00191", "scoring_system": "epss", "scoring_elements": "0.40776", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36012" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ir/importexport/functiondef_import.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ir/importexport/functiondef_import.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/ad069af92392efee1418c48ff561fd3070a03d7b", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/ad069af92392efee1418c48ff561fd3070a03d7b" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36012", "reference_id": "CVE-2022-36012", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36012" }, { "reference_url": "https://github.com/advisories/GHSA-jvhc-5hhr-w3v5", "reference_id": "GHSA-jvhc-5hhr-w3v5", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-jvhc-5hhr-w3v5" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jvhc-5hhr-w3v5", "reference_id": "GHSA-jvhc-5hhr-w3v5", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jvhc-5hhr-w3v5" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36012", "GHSA-jvhc-5hhr-w3v5" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8dwk-hykt-93a5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17155?format=api", "vulnerability_id": "VCID-9686-ufak-6ufd", "summary": "Incorrect Comparison\nTensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25673", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0028", "scoring_system": "epss", "scoring_elements": "0.5155", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25673" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:15:44Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25673", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25673" }, { "reference_url": "https://github.com/advisories/GHSA-647v-r7qq-24fh", "reference_id": "GHSA-647v-r7qq-24fh", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-647v-r7qq-24fh" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-647v-r7qq-24fh", "reference_id": "GHSA-647v-r7qq-24fh", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:15:44Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-647v-r7qq-24fh" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25673", "GHSA-647v-r7qq-24fh" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9686-ufak-6ufd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3229?format=api", "vulnerability_id": "VCID-9dhc-1f13-5qht", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41219", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00019", "scoring_system": "epss", "scoring_elements": "0.05669", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41219" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-628.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-628.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-826.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-826.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-411.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-411.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/e6cf28c72ba2eb949ca950d834dd6d66bb01cfae", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/e6cf28c72ba2eb949ca950d834dd6d66bb01cfae" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4f99-p9c2-3j8x", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4f99-p9c2-3j8x" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41219", "reference_id": "CVE-2021-41219", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41219" }, { "reference_url": "https://github.com/advisories/GHSA-4f99-p9c2-3j8x", "reference_id": "GHSA-4f99-p9c2-3j8x", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4f99-p9c2-3j8x" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41219", "CVE-2021-41219", "GHSA-4f99-p9c2-3j8x", "PYSEC-2021-411", "PYSEC-2021-628", "PYSEC-2021-826" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9dhc-1f13-5qht" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3241?format=api", "vulnerability_id": "VCID-9gde-ga9q-pqb4", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41207", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04734", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41207" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-616.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-616.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-814.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-814.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-399.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-399.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/inplace_ops.cc#L72-L97", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/inplace_ops.cc#L72-L97" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/9de11bdc2cf1284b2f635419bd3e6bbc7643eb2c", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/9de11bdc2cf1284b2f635419bd3e6bbc7643eb2c" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/d11f21bbdfa54f3576ae860fc927bf23c675ebc0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/d11f21bbdfa54f3576ae860fc927bf23c675ebc0" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/e67caccea81167402c62977b5c521f2a8b261d6a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/e67caccea81167402c62977b5c521f2a8b261d6a" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7v94-64hj-m82h", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7v94-64hj-m82h" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41207", "reference_id": "CVE-2021-41207", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41207" }, { "reference_url": "https://github.com/advisories/GHSA-7v94-64hj-m82h", "reference_id": "GHSA-7v94-64hj-m82h", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7v94-64hj-m82h" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41207", "CVE-2021-41207", "GHSA-7v94-64hj-m82h", "PYSEC-2021-399", "PYSEC-2021-616", "PYSEC-2021-814" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9gde-ga9q-pqb4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201006?format=api", "vulnerability_id": "VCID-9hzh-a72m-nya3", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35984", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35984" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/72180be03447a10810edca700cbc9af690dfeb51", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:03Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/72180be03447a10810edca700cbc9af690dfeb51" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35984", "reference_id": "CVE-2022-35984", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35984" }, { "reference_url": "https://github.com/advisories/GHSA-p2xf-8hgm-hpw5", "reference_id": "GHSA-p2xf-8hgm-hpw5", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-p2xf-8hgm-hpw5" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-p2xf-8hgm-hpw5", "reference_id": "GHSA-p2xf-8hgm-hpw5", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:03Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-p2xf-8hgm-hpw5" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35984", "GHSA-p2xf-8hgm-hpw5" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9hzh-a72m-nya3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3244?format=api", "vulnerability_id": "VCID-9snf-qxka-83hd", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41204", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04734", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41204" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-614.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-614.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-812.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-812.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-397.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-397.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/7731e8dfbe4a56773be5dc94d631611211156659", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/7731e8dfbe4a56773be5dc94d631611211156659" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-786j-5qwq-r36x", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-786j-5qwq-r36x" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41204", "reference_id": "CVE-2021-41204", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41204" }, { "reference_url": "https://github.com/advisories/GHSA-786j-5qwq-r36x", "reference_id": "GHSA-786j-5qwq-r36x", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-786j-5qwq-r36x" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41204", "CVE-2021-41204", "GHSA-786j-5qwq-r36x", "PYSEC-2021-397", "PYSEC-2021-614", "PYSEC-2021-812" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9snf-qxka-83hd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3249?format=api", "vulnerability_id": "VCID-aad5-dg9x-53cz", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41199", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00049", "scoring_system": "epss", "scoring_elements": "0.15708", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41199" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-609.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-609.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-807.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-807.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-392.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-392.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/e5272d4204ff5b46136a1ef1204fc00597e21837", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/e5272d4204ff5b46136a1ef1204fc00597e21837" }, { "reference_url": "https://github.com/tensorflow/tensorflow/issues/46914", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/issues/46914" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hx2-qx8j-qjqm", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hx2-qx8j-qjqm" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41199", "reference_id": "CVE-2021-41199", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41199" }, { "reference_url": "https://github.com/advisories/GHSA-5hx2-qx8j-qjqm", "reference_id": "GHSA-5hx2-qx8j-qjqm", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5hx2-qx8j-qjqm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41199", "CVE-2021-41199", "GHSA-5hx2-qx8j-qjqm", "PYSEC-2021-392", "PYSEC-2021-609", "PYSEC-2021-807" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-aad5-dg9x-53cz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201017?format=api", "vulnerability_id": "VCID-ah8y-bmdk-5khm", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35995", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35995" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/bf6b45244992e2ee543c258e519489659c99fb7f", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/bf6b45244992e2ee543c258e519489659c99fb7f" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35995", "reference_id": "CVE-2022-35995", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35995" }, { "reference_url": "https://github.com/advisories/GHSA-g9h5-vr8m-x2h4", "reference_id": "GHSA-g9h5-vr8m-x2h4", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-g9h5-vr8m-x2h4" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g9h5-vr8m-x2h4", "reference_id": "GHSA-g9h5-vr8m-x2h4", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g9h5-vr8m-x2h4" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35995", "GHSA-g9h5-vr8m-x2h4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ah8y-bmdk-5khm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17171?format=api", "vulnerability_id": "VCID-ayew-3cca-tyhz", "summary": "NULL Pointer Dereference\nTensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConcat` segfaults with a nullptr dereference when given a parameter `shape` with rank that is not greater than zero. A fix is available in TensorFlow 2.12.0 and 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25676", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0024", "scoring_system": "epss", "scoring_elements": "0.47215", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25676" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/da66bc6d5ff466aee084f9e7397980a24890cd15", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:43:05Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/da66bc6d5ff466aee084f9e7397980a24890cd15" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25676", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25676" }, { "reference_url": "https://github.com/advisories/GHSA-6wfh-89q8-44jq", "reference_id": "GHSA-6wfh-89q8-44jq", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6wfh-89q8-44jq" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6wfh-89q8-44jq", "reference_id": "GHSA-6wfh-89q8-44jq", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:43:05Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6wfh-89q8-44jq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25676", "GHSA-6wfh-89q8-44jq" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ayew-3cca-tyhz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3220?format=api", "vulnerability_id": "VCID-b8sr-erwh-5yh8", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41228", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0004", "scoring_system": "epss", "scoring_elements": "0.12379", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41228" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-637.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "5.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-637.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-835.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "5.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-835.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-420.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "5.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-420.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "5.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/8b202f08d52e8206af2bdb2112a62fafbc546ec7", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "5.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/8b202f08d52e8206af2bdb2112a62fafbc546ec7" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3rcw-9p9x-582v", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "5.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3rcw-9p9x-582v" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41228", "reference_id": "CVE-2021-41228", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" }, { "value": "5.0", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41228" }, { "reference_url": "https://github.com/advisories/GHSA-3rcw-9p9x-582v", "reference_id": "GHSA-3rcw-9p9x-582v", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-3rcw-9p9x-582v" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41228", "CVE-2021-41228", "GHSA-3rcw-9p9x-582v", "PYSEC-2021-420", "PYSEC-2021-637", "PYSEC-2021-835" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b8sr-erwh-5yh8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201035?format=api", "vulnerability_id": "VCID-b9p4-ta3s-wbeu", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36013", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00222", "scoring_system": "epss", "scoring_elements": "0.4487", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36013" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ir/importexport/graphdef_import.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ir/importexport/graphdef_import.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/a0f0b9a21c9270930457095092f558fbad4c03e5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/a0f0b9a21c9270930457095092f558fbad4c03e5" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36013", "reference_id": "CVE-2022-36013", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36013" }, { "reference_url": "https://github.com/advisories/GHSA-828c-5j5q-vrjq", "reference_id": "GHSA-828c-5j5q-vrjq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-828c-5j5q-vrjq" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-828c-5j5q-vrjq", "reference_id": "GHSA-828c-5j5q-vrjq", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-828c-5j5q-vrjq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36013", "GHSA-828c-5j5q-vrjq" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b9p4-ta3s-wbeu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205544?format=api", "vulnerability_id": "VCID-bby1-jzms-6fgm", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41908", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00313", "scoring_system": "epss", "scoring_elements": "0.54712", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41908" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/python/lib/core/py_func.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:38Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/python/lib/core/py_func.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/9f03a9d3bafe902c1e6beb105b2f24172f238645", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:38Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/9f03a9d3bafe902c1e6beb105b2f24172f238645" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41908", "reference_id": "CVE-2022-41908", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41908" }, { "reference_url": "https://github.com/advisories/GHSA-mv77-9g28-cwg3", "reference_id": "GHSA-mv77-9g28-cwg3", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mv77-9g28-cwg3" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mv77-9g28-cwg3", "reference_id": "GHSA-mv77-9g28-cwg3", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:38Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mv77-9g28-cwg3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41908", "GHSA-mv77-9g28-cwg3" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bby1-jzms-6fgm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201005?format=api", "vulnerability_id": "VCID-bjrr-3t28-rqgp", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35983", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35983" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/5dd7b86b84a864b834c6fa3d7f9f51c87efa99d4", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:06Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/5dd7b86b84a864b834c6fa3d7f9f51c87efa99d4" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35983", "reference_id": "CVE-2022-35983", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35983" }, { "reference_url": "https://github.com/advisories/GHSA-m6vp-8q9j-whx4", "reference_id": "GHSA-m6vp-8q9j-whx4", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m6vp-8q9j-whx4" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m6vp-8q9j-whx4", "reference_id": "GHSA-m6vp-8q9j-whx4", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:06Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m6vp-8q9j-whx4" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35983", "GHSA-m6vp-8q9j-whx4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bjrr-3t28-rqgp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3221?format=api", "vulnerability_id": "VCID-bm3u-2ych-eqac", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41227", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00082", "scoring_system": "epss", "scoring_elements": "0.241", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41227" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-636.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-636.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-834.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-834.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-419.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-419.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/1cb6bb6c2a6019417c9adaf9e6843ba75ee2580b", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/1cb6bb6c2a6019417c9adaf9e6843ba75ee2580b" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/3712a2d3455e6ccb924daa5724a3652a86f6b585", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/3712a2d3455e6ccb924daa5724a3652a86f6b585" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j8c8-67vp-6mx7", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j8c8-67vp-6mx7" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41227", "reference_id": "CVE-2021-41227", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41227" }, { "reference_url": "https://github.com/advisories/GHSA-j8c8-67vp-6mx7", "reference_id": "GHSA-j8c8-67vp-6mx7", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-j8c8-67vp-6mx7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41227", "CVE-2021-41227", "GHSA-j8c8-67vp-6mx7", "PYSEC-2021-419", "PYSEC-2021-636", "PYSEC-2021-834" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bm3u-2ych-eqac" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3248?format=api", "vulnerability_id": "VCID-cu5c-pmqv-xkdz", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41200", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00049", "scoring_system": "epss", "scoring_elements": "0.15532", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41200" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-610.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-610.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-808.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-808.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-393.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-393.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/874bda09e6702cd50bac90b453b50bcc65b2769e", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/874bda09e6702cd50bac90b453b50bcc65b2769e" }, { "reference_url": "https://github.com/tensorflow/tensorflow/issues/46909", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/issues/46909" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh8h-7j2j-qv4f", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh8h-7j2j-qv4f" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41200", "reference_id": "CVE-2021-41200", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41200" }, { "reference_url": "https://github.com/advisories/GHSA-gh8h-7j2j-qv4f", "reference_id": "GHSA-gh8h-7j2j-qv4f", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gh8h-7j2j-qv4f" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41200", "CVE-2021-41200", "GHSA-gh8h-7j2j-qv4f", "PYSEC-2021-393", "PYSEC-2021-610", "PYSEC-2021-808" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cu5c-pmqv-xkdz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17156?format=api", "vulnerability_id": "VCID-d6hn-ppha-buc1", "summary": "Incorrect Comparison\nTensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for `tf.raw_ops.AvgPoolGrad`, it can give a floating point exception. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25669", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00206", "scoring_system": "epss", "scoring_elements": "0.42803", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25669" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:33:22Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/1295ae4dbb52fe06b19733b0257e2340d7b63b8d" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25669", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25669" }, { "reference_url": "https://github.com/advisories/GHSA-rcf8-g8jv-vg6p", "reference_id": "GHSA-rcf8-g8jv-vg6p", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rcf8-g8jv-vg6p" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rcf8-g8jv-vg6p", "reference_id": "GHSA-rcf8-g8jv-vg6p", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:33:22Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rcf8-g8jv-vg6p" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25669", "GHSA-rcf8-g8jv-vg6p" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d6hn-ppha-buc1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17153?format=api", "vulnerability_id": "VCID-dbu5-btf9-2bee", "summary": "NULL Pointer Dereference\nTensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero, the new method `SummarizeArray<bool>` will reference to a nullptr, leading to a seg fault. A fix is included in TensorFlow version 2.12 and version 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25660", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0024", "scoring_system": "epss", "scoring_elements": "0.47215", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25660" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/6d423b8bcc9aa9f5554dc988c1c16d038b508df1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:30:06Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/6d423b8bcc9aa9f5554dc988c1c16d038b508df1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25660", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25660" }, { "reference_url": "https://github.com/advisories/GHSA-qjqc-vqcf-5qvj", "reference_id": "GHSA-qjqc-vqcf-5qvj", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qjqc-vqcf-5qvj" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qjqc-vqcf-5qvj", "reference_id": "GHSA-qjqc-vqcf-5qvj", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:30:06Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qjqc-vqcf-5qvj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25660", "GHSA-qjqc-vqcf-5qvj" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dbu5-btf9-2bee" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201013?format=api", "vulnerability_id": "VCID-degg-b7w4-jyg7", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35991", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34665", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35991" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/bb03fdf4aae944ab2e4b35c7daa051068a8b7f61", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/bb03fdf4aae944ab2e4b35c7daa051068a8b7f61" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35991", "reference_id": "CVE-2022-35991", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35991" }, { "reference_url": "https://github.com/advisories/GHSA-vm7x-4qhj-rrcq", "reference_id": "GHSA-vm7x-4qhj-rrcq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vm7x-4qhj-rrcq" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vm7x-4qhj-rrcq", "reference_id": "GHSA-vm7x-4qhj-rrcq", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vm7x-4qhj-rrcq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35991", "GHSA-vm7x-4qhj-rrcq" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-degg-b7w4-jyg7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17154?format=api", "vulnerability_id": "VCID-dgbb-1rft-7kdr", "summary": "Integer Overflow or Wraparound\nTensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 is vulnerable to integer overflow in EditDistance. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25662", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35483", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25662" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/08b8e18643d6dcde00890733b270ff8d9960c56c", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:37:26Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/08b8e18643d6dcde00890733b270ff8d9960c56c" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25662", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25662" }, { "reference_url": "https://github.com/advisories/GHSA-7jvm-xxmr-v5cw", "reference_id": "GHSA-7jvm-xxmr-v5cw", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7jvm-xxmr-v5cw" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7jvm-xxmr-v5cw", "reference_id": "GHSA-7jvm-xxmr-v5cw", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:37:26Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7jvm-xxmr-v5cw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25662", "GHSA-7jvm-xxmr-v5cw" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dgbb-1rft-7kdr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3237?format=api", "vulnerability_id": "VCID-dj7v-yppg-ckdp", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41211", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00019", "scoring_system": "epss", "scoring_elements": "0.05669", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41211" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-620.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-620.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-818.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-818.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-403.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-403.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/a0d64445116c43cf46a5666bd4eee28e7a82f244", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/a0d64445116c43cf46a5666bd4eee28e7a82f244" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cvgx-3v3q-m36c", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cvgx-3v3q-m36c" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41211", "reference_id": "CVE-2021-41211", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41211" }, { "reference_url": "https://github.com/advisories/GHSA-cvgx-3v3q-m36c", "reference_id": "GHSA-cvgx-3v3q-m36c", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cvgx-3v3q-m36c" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41211", "CVE-2021-41211", "GHSA-cvgx-3v3q-m36c", "PYSEC-2021-403", "PYSEC-2021-620", "PYSEC-2021-818" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dj7v-yppg-ckdp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17173?format=api", "vulnerability_id": "VCID-djkj-bbaq-6kdr", "summary": "NULL Pointer Dereference\nTensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix is included in TensorFlow 2.12.0 and 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25674", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60368", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25674" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:16:05Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/728113a3be690facad6ce436660a0bc1858017fa" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25674", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25674" }, { "reference_url": "https://github.com/advisories/GHSA-gf97-q72m-7579", "reference_id": "GHSA-gf97-q72m-7579", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gf97-q72m-7579" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579", "reference_id": "GHSA-gf97-q72m-7579", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:16:05Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf97-q72m-7579" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25674", "GHSA-gf97-q72m-7579" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-djkj-bbaq-6kdr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201027?format=api", "vulnerability_id": "VCID-djxs-vpxa-5bav", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36005", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0007", "scoring_system": "epss", "scoring_elements": "0.21629", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36005" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/f3cf67ac5705f4f04721d15e485e192bb319feed", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/f3cf67ac5705f4f04721d15e485e192bb319feed" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36005", "reference_id": "CVE-2022-36005", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36005" }, { "reference_url": "https://github.com/advisories/GHSA-r26c-679w-mrjm", "reference_id": "GHSA-r26c-679w-mrjm", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-r26c-679w-mrjm" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r26c-679w-mrjm", "reference_id": "GHSA-r26c-679w-mrjm", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r26c-679w-mrjm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36005", "GHSA-r26c-679w-mrjm" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-djxs-vpxa-5bav" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205529?format=api", "vulnerability_id": "VCID-dk2p-s22p-hbd8", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41891", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00187", "scoring_system": "epss", "scoring_elements": "0.40259", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41891" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.h", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:16Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.h" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/fc33f3dc4c14051a83eec6535b608abe1d355fde", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:16Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/fc33f3dc4c14051a83eec6535b608abe1d355fde" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41891", "reference_id": "CVE-2022-41891", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41891" }, { "reference_url": "https://github.com/advisories/GHSA-66vq-54fq-6jvv", "reference_id": "GHSA-66vq-54fq-6jvv", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-66vq-54fq-6jvv" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-66vq-54fq-6jvv", "reference_id": "GHSA-66vq-54fq-6jvv", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:16Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-66vq-54fq-6jvv" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41891", "GHSA-66vq-54fq-6jvv" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dk2p-s22p-hbd8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17159?format=api", "vulnerability_id": "VCID-dx1v-hfa1-xfg6", "summary": "NULL Pointer Dereference\nTensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `SparseSparseMaximum` is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included in TensorFlow version 2.12 and version 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25665", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00125", "scoring_system": "epss", "scoring_elements": "0.31359", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25665" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/5e0ecfb42f5f65629fd7a4edd6c4afe7ff0feb04", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:30:58Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/5e0ecfb42f5f65629fd7a4edd6c4afe7ff0feb04" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25665", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25665" }, { "reference_url": "https://github.com/advisories/GHSA-558h-mq8x-7q9g", "reference_id": "GHSA-558h-mq8x-7q9g", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-558h-mq8x-7q9g" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-558h-mq8x-7q9g", "reference_id": "GHSA-558h-mq8x-7q9g", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:30:58Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-558h-mq8x-7q9g" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25665", "GHSA-558h-mq8x-7q9g" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dx1v-hfa1-xfg6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201022?format=api", "vulnerability_id": "VCID-e7nb-5swt-r3c9", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36000", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22634", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36000" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/aed36912609fc07229b4d0a7b44f3f48efc00fd0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/aed36912609fc07229b4d0a7b44f3f48efc00fd0" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36000", "reference_id": "CVE-2022-36000", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36000" }, { "reference_url": "https://github.com/advisories/GHSA-fqxc-pvf8-2w9v", "reference_id": "GHSA-fqxc-pvf8-2w9v", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fqxc-pvf8-2w9v" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqxc-pvf8-2w9v", "reference_id": "GHSA-fqxc-pvf8-2w9v", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fqxc-pvf8-2w9v" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36000", "GHSA-fqxc-pvf8-2w9v" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e7nb-5swt-r3c9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201016?format=api", "vulnerability_id": "VCID-ebu7-ts8t-43br", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35994", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.127", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35994" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/c1f491817dec39a26be3c574e86a88c30f3c4770", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/c1f491817dec39a26be3c574e86a88c30f3c4770" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35994", "reference_id": "CVE-2022-35994", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35994" }, { "reference_url": "https://github.com/advisories/GHSA-fhfc-2q7x-929f", "reference_id": "GHSA-fhfc-2q7x-929f", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fhfc-2q7x-929f" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fhfc-2q7x-929f", "reference_id": "GHSA-fhfc-2q7x-929f", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fhfc-2q7x-929f" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35994", "GHSA-fhfc-2q7x-929f" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ebu7-ts8t-43br" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200960?format=api", "vulnerability_id": "VCID-etu4-tnze-h3ag", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35935", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00093", "scoring_system": "epss", "scoring_elements": "0.26062", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35935" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/c65c67f88ad770662e8f191269a907bf2b94b1bf", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:14Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/c65c67f88ad770662e8f191269a907bf2b94b1bf" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35935", "reference_id": "CVE-2022-35935", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35935" }, { "reference_url": "https://github.com/advisories/GHSA-97p7-w86h-vcf9", "reference_id": "GHSA-97p7-w86h-vcf9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-97p7-w86h-vcf9" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-97p7-w86h-vcf9", "reference_id": "GHSA-97p7-w86h-vcf9", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:14Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-97p7-w86h-vcf9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35935", "GHSA-97p7-w86h-vcf9" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-etu4-tnze-h3ag" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3243?format=api", "vulnerability_id": "VCID-exm3-hpp6-g7hg", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41205", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00019", "scoring_system": "epss", "scoring_elements": "0.05349", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41205" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-615.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-615.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-813.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-813.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-398.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-398.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/7cf73a2274732c9d82af51c2bc2cf90d13cd7e6d", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/7cf73a2274732c9d82af51c2bc2cf90d13cd7e6d" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rx-x2rw-pc6f", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rx-x2rw-pc6f" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41205", "reference_id": "CVE-2021-41205", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41205" }, { "reference_url": "https://github.com/advisories/GHSA-49rx-x2rw-pc6f", "reference_id": "GHSA-49rx-x2rw-pc6f", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-49rx-x2rw-pc6f" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41205", "CVE-2021-41205", "GHSA-49rx-x2rw-pc6f", "PYSEC-2021-398", "PYSEC-2021-615", "PYSEC-2021-813" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-exm3-hpp6-g7hg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17174?format=api", "vulnerability_id": "VCID-f58d-1zga-jkf2", "summary": "NULL Pointer Dereference\nTensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `ctx->step_containter()` is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in TensorFlow 2.12.0 and 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25663", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00206", "scoring_system": "epss", "scoring_elements": "0.42957", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25663" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/239139d2ae6a81ae9ba499ad78b56d9b2931538a", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:38:12Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/239139d2ae6a81ae9ba499ad78b56d9b2931538a" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25663", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25663" }, { "reference_url": "https://github.com/advisories/GHSA-64jg-wjww-7c5w", "reference_id": "GHSA-64jg-wjww-7c5w", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-64jg-wjww-7c5w" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-64jg-wjww-7c5w", "reference_id": "GHSA-64jg-wjww-7c5w", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:38:12Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-64jg-wjww-7c5w" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25663", "GHSA-64jg-wjww-7c5w" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-f58d-1zga-jkf2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200987?format=api", "vulnerability_id": "VCID-f8ut-vanr-1qbz", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35965", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22634", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35965" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/bce3717eaef4f769019fd18e990464ca4a2efeea", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:50Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/bce3717eaef4f769019fd18e990464ca4a2efeea" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35965", "reference_id": "CVE-2022-35965", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35965" }, { "reference_url": "https://github.com/advisories/GHSA-qxpx-j395-pw36", "reference_id": "GHSA-qxpx-j395-pw36", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qxpx-j395-pw36" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qxpx-j395-pw36", "reference_id": "GHSA-qxpx-j395-pw36", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:50Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qxpx-j395-pw36" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35965", "GHSA-qxpx-j395-pw36" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-f8ut-vanr-1qbz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3228?format=api", "vulnerability_id": "VCID-fa9v-1a1j-5ydf", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41220", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.06407", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41220" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-629.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-629.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-827.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-827.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-412.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-412.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/ca38dab9d3ee66c5de06f11af9a4b1200da5ef75", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/ca38dab9d3ee66c5de06f11af9a4b1200da5ef75" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gpfh-jvf9-7wg5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gpfh-jvf9-7wg5" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41220", "reference_id": "CVE-2021-41220", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41220" }, { "reference_url": "https://github.com/advisories/GHSA-gpfh-jvf9-7wg5", "reference_id": "GHSA-gpfh-jvf9-7wg5", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gpfh-jvf9-7wg5" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41220", "CVE-2021-41220", "GHSA-gpfh-jvf9-7wg5", "PYSEC-2021-412", "PYSEC-2021-629", "PYSEC-2021-827" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fa9v-1a1j-5ydf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200964?format=api", "vulnerability_id": "VCID-fr8d-65tt-a7bw", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35939", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00231", "scoring_system": "epss", "scoring_elements": "0.46002", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35939" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/266558ac4c1f361e9a178ee9d3f0ce2e648ae499/tensorflow/lite/kernels/internal/reference/reference_ops.h#L659-L698", "reference_id": "", "reference_type": "", "scores": [ { "value": "7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:11Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/266558ac4c1f361e9a178ee9d3f0ce2e648ae499/tensorflow/lite/kernels/internal/reference/reference_ops.h#L659-L698" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/b4d4b4cb019bd7240a52daa4ba61e3cc814f0384", "reference_id": "", "reference_type": "", "scores": [ { "value": "7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:11Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/b4d4b4cb019bd7240a52daa4ba61e3cc814f0384" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35939", "reference_id": "CVE-2022-35939", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35939" }, { "reference_url": "https://github.com/advisories/GHSA-ffjm-4qwc-7cmf", "reference_id": "GHSA-ffjm-4qwc-7cmf", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-ffjm-4qwc-7cmf" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-ffjm-4qwc-7cmf", "reference_id": "GHSA-ffjm-4qwc-7cmf", "reference_type": "", "scores": [ { "value": "7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:11Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-ffjm-4qwc-7cmf" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35939", "GHSA-ffjm-4qwc-7cmf" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fr8d-65tt-a7bw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3246?format=api", "vulnerability_id": "VCID-g144-4yvx-xybr", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41202", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00037", "scoring_system": "epss", "scoring_elements": "0.11432", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41202" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-612.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-612.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-810.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-810.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-395.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-395.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/1b0e0ec27e7895b9985076eab32445026ae5ca94", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/1b0e0ec27e7895b9985076eab32445026ae5ca94" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/6d94002a09711d297dbba90390d5482b76113899", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/6d94002a09711d297dbba90390d5482b76113899" }, { "reference_url": "https://github.com/tensorflow/tensorflow/issues/46889", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/issues/46889" }, { "reference_url": "https://github.com/tensorflow/tensorflow/issues/46912", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/issues/46912" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xrqm-fpgr-6hhx", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xrqm-fpgr-6hhx" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41202", "reference_id": "CVE-2021-41202", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41202" }, { "reference_url": "https://github.com/advisories/GHSA-xrqm-fpgr-6hhx", "reference_id": "GHSA-xrqm-fpgr-6hhx", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xrqm-fpgr-6hhx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41202", "CVE-2021-41202", "GHSA-xrqm-fpgr-6hhx", "PYSEC-2021-395", "PYSEC-2021-612", "PYSEC-2021-810" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-g144-4yvx-xybr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3224?format=api", "vulnerability_id": "VCID-g423-bnfj-kybz", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41224", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00019", "scoring_system": "epss", "scoring_elements": "0.05349", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41224" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-633.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-633.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-831.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-831.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-416.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-416.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/67bfd9feeecfb3c61d80f0e46d89c170fbee682b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/67bfd9feeecfb3c61d80f0e46d89c170fbee682b" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rg3m-hqc5-344v", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rg3m-hqc5-344v" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41224", "reference_id": "CVE-2021-41224", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41224" }, { "reference_url": "https://github.com/advisories/GHSA-rg3m-hqc5-344v", "reference_id": "GHSA-rg3m-hqc5-344v", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rg3m-hqc5-344v" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41224", "CVE-2021-41224", "GHSA-rg3m-hqc5-344v", "PYSEC-2021-416", "PYSEC-2021-633", "PYSEC-2021-831" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-g423-bnfj-kybz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3238?format=api", "vulnerability_id": "VCID-gbft-tx74-wkhf", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41210", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00019", "scoring_system": "epss", "scoring_elements": "0.05349", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41210" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-619.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-619.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-817.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-817.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-402.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-402.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/701cfaca222a82afbeeb17496bd718baa65a67d2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/701cfaca222a82afbeeb17496bd718baa65a67d2" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m342-ff57-4jcc", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m342-ff57-4jcc" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41210", "reference_id": "CVE-2021-41210", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41210" }, { "reference_url": "https://github.com/advisories/GHSA-m342-ff57-4jcc", "reference_id": "GHSA-m342-ff57-4jcc", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m342-ff57-4jcc" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41210", "CVE-2021-41210", "GHSA-m342-ff57-4jcc", "PYSEC-2021-402", "PYSEC-2021-619", "PYSEC-2021-817" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gbft-tx74-wkhf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200994?format=api", "vulnerability_id": "VCID-gnns-f4aa-wuas", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35972", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35972" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:25Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35972", "reference_id": "CVE-2022-35972", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35972" }, { "reference_url": "https://github.com/advisories/GHSA-4pc4-m9mj-v2r9", "reference_id": "GHSA-4pc4-m9mj-v2r9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4pc4-m9mj-v2r9" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4pc4-m9mj-v2r9", "reference_id": "GHSA-4pc4-m9mj-v2r9", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:25Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4pc4-m9mj-v2r9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35972", "GHSA-4pc4-m9mj-v2r9" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gnns-f4aa-wuas" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17160?format=api", "vulnerability_id": "VCID-gpta-cf34-vkfe", "summary": "Out-of-bounds Read\nTensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the parameter `indices` for `DynamicStitch` does not match the shape of the parameter `data`, it can trigger an stack OOB read. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25659", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00204", "scoring_system": "epss", "scoring_elements": "0.42488", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25659" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/ee004b18b976eeb5a758020af8880236cd707d05", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:34:25Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/ee004b18b976eeb5a758020af8880236cd707d05" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25659", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25659" }, { "reference_url": "https://github.com/advisories/GHSA-93vr-9q9m-pj8p", "reference_id": "GHSA-93vr-9q9m-pj8p", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-93vr-9q9m-pj8p" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-93vr-9q9m-pj8p", "reference_id": "GHSA-93vr-9q9m-pj8p", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:34:25Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-93vr-9q9m-pj8p" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25659", "GHSA-93vr-9q9m-pj8p" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gpta-cf34-vkfe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200976?format=api", "vulnerability_id": "VCID-gqh9-w7d2-r7ap", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35952", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00219", "scoring_system": "epss", "scoring_elements": "0.4452", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35952" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/769eddaf479c8debead9a59a72617d6ed6f0fe10/tensorflow/core/kernels/batch_kernels.cc#L891", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:01Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/769eddaf479c8debead9a59a72617d6ed6f0fe10/tensorflow/core/kernels/batch_kernels.cc#L891" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/5f945fc6409a3c1e90d6970c9292f805f6e6ddf2", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:01Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/5f945fc6409a3c1e90d6970c9292f805f6e6ddf2" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35952", "reference_id": "CVE-2022-35952", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35952" }, { "reference_url": "https://github.com/advisories/GHSA-h5vq-gw2c-pq47", "reference_id": "GHSA-h5vq-gw2c-pq47", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-h5vq-gw2c-pq47" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h5vq-gw2c-pq47", "reference_id": "GHSA-h5vq-gw2c-pq47", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:01Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h5vq-gw2c-pq47" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35952", "GHSA-h5vq-gw2c-pq47" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gqh9-w7d2-r7ap" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201009?format=api", "vulnerability_id": "VCID-hdth-hp7r-ebfs", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35987", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35987" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/bf4c14353c2328636a18bfad1e151052c81d5f43", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:57Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/bf4c14353c2328636a18bfad1e151052c81d5f43" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35987", "reference_id": "CVE-2022-35987", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35987" }, { "reference_url": "https://github.com/advisories/GHSA-w62h-8xjm-fv49", "reference_id": "GHSA-w62h-8xjm-fv49", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w62h-8xjm-fv49" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w62h-8xjm-fv49", "reference_id": "GHSA-w62h-8xjm-fv49", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:57Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w62h-8xjm-fv49" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35987", "GHSA-w62h-8xjm-fv49" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hdth-hp7r-ebfs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17169?format=api", "vulnerability_id": "VCID-hdyy-j28t-wyc1", "summary": "Heap-based Buffer Overflow\nTensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25664", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0009", "scoring_system": "epss", "scoring_elements": "0.25594", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25664" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/ddaac2bdd099bec5d7923dea45276a7558217e5b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:38:56Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/ddaac2bdd099bec5d7923dea45276a7558217e5b" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25664", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25664" }, { "reference_url": "https://github.com/advisories/GHSA-6hg6-5c2q-7rcr", "reference_id": "GHSA-6hg6-5c2q-7rcr", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6hg6-5c2q-7rcr" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hg6-5c2q-7rcr", "reference_id": "GHSA-6hg6-5c2q-7rcr", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:38:56Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hg6-5c2q-7rcr" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25664", "GHSA-6hg6-5c2q-7rcr" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hdyy-j28t-wyc1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201026?format=api", "vulnerability_id": "VCID-hjd9-vujt-g7d2", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36004", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22405", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36004" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/552bfced6ce4809db5f3ca305f60ff80dd40c5a3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/552bfced6ce4809db5f3ca305f60ff80dd40c5a3" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36004", "reference_id": "CVE-2022-36004", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36004" }, { "reference_url": "https://github.com/advisories/GHSA-mv8m-8x97-937q", "reference_id": "GHSA-mv8m-8x97-937q", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mv8m-8x97-937q" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mv8m-8x97-937q", "reference_id": "GHSA-mv8m-8x97-937q", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mv8m-8x97-937q" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36004", "GHSA-mv8m-8x97-937q" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hjd9-vujt-g7d2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200995?format=api", "vulnerability_id": "VCID-jmr2-tp5q-6qau", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35973", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35973" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/aca766ac7693bf29ed0df55ad6bfcc78f35e7f48", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:27Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/aca766ac7693bf29ed0df55ad6bfcc78f35e7f48" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35973", "reference_id": "CVE-2022-35973", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35973" }, { "reference_url": "https://github.com/advisories/GHSA-689c-r7h2-fv9v", "reference_id": "GHSA-689c-r7h2-fv9v", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-689c-r7h2-fv9v" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-689c-r7h2-fv9v", "reference_id": "GHSA-689c-r7h2-fv9v", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:27Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-689c-r7h2-fv9v" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35973", "GHSA-689c-r7h2-fv9v" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jmr2-tp5q-6qau" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201001?format=api", "vulnerability_id": "VCID-kdhk-ygud-9bft", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35979", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35979" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/49b3824d83af706df0ad07e4e677d88659756d89", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:19Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/49b3824d83af706df0ad07e4e677d88659756d89" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35979", "reference_id": "CVE-2022-35979", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35979" }, { "reference_url": "https://github.com/advisories/GHSA-v7vw-577f-vp8x", "reference_id": "GHSA-v7vw-577f-vp8x", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-v7vw-577f-vp8x" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v7vw-577f-vp8x", "reference_id": "GHSA-v7vw-577f-vp8x", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:19Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v7vw-577f-vp8x" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35979", "GHSA-v7vw-577f-vp8x" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kdhk-ygud-9bft" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201003?format=api", "vulnerability_id": "VCID-kjwx-6qbk-37ak", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35981", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35981" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/8741e57d163a079db05a7107a7609af70931def4", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:17Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/8741e57d163a079db05a7107a7609af70931def4" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35981", "reference_id": "CVE-2022-35981", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35981" }, { "reference_url": "https://github.com/advisories/GHSA-vxv8-r8q2-63xw", "reference_id": "GHSA-vxv8-r8q2-63xw", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vxv8-r8q2-63xw" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vxv8-r8q2-63xw", "reference_id": "GHSA-vxv8-r8q2-63xw", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:17Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vxv8-r8q2-63xw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35981", "GHSA-vxv8-r8q2-63xw" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kjwx-6qbk-37ak" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3232?format=api", "vulnerability_id": "VCID-kupu-frrt-pqen", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41216", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0002", "scoring_system": "epss", "scoring_elements": "0.0578", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41216" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-625.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-625.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-823.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-823.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-408.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-408.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/ops/array_ops.cc#L121-L185", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/ops/array_ops.cc#L121-L185" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/c79ba87153ee343401dbe9d1954d7f79e521eb14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/c79ba87153ee343401dbe9d1954d7f79e521eb14" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3ff2-r28g-w7h9", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3ff2-r28g-w7h9" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41216", "reference_id": "CVE-2021-41216", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41216" }, { "reference_url": "https://github.com/advisories/GHSA-3ff2-r28g-w7h9", "reference_id": "GHSA-3ff2-r28g-w7h9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-3ff2-r28g-w7h9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41216", "CVE-2021-41216", "GHSA-3ff2-r28g-w7h9", "PYSEC-2021-408", "PYSEC-2021-625", "PYSEC-2021-823" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kupu-frrt-pqen" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201041?format=api", "vulnerability_id": "VCID-m4j4-decm-tkb6", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36019", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36019" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:49Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36019", "reference_id": "CVE-2022-36019", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36019" }, { "reference_url": "https://github.com/advisories/GHSA-9j4v-pp28-mxv7", "reference_id": "GHSA-9j4v-pp28-mxv7", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9j4v-pp28-mxv7" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9j4v-pp28-mxv7", "reference_id": "GHSA-9j4v-pp28-mxv7", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:49Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9j4v-pp28-mxv7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36019", "GHSA-9j4v-pp28-mxv7" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m4j4-decm-tkb6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201012?format=api", "vulnerability_id": "VCID-mrjt-fjbf-gyeh", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35990", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35990" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/f3cf67ac5705f4f04721d15e485e192bb319feed", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:52Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/f3cf67ac5705f4f04721d15e485e192bb319feed" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35990", "reference_id": "CVE-2022-35990", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35990" }, { "reference_url": "https://github.com/advisories/GHSA-h7ff-cfc9-wmmh", "reference_id": "GHSA-h7ff-cfc9-wmmh", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-h7ff-cfc9-wmmh" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h7ff-cfc9-wmmh", "reference_id": "GHSA-h7ff-cfc9-wmmh", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:52Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h7ff-cfc9-wmmh" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35990", "GHSA-h7ff-cfc9-wmmh" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mrjt-fjbf-gyeh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3245?format=api", "vulnerability_id": "VCID-myjm-gbbc-qucg", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41203", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00019", "scoring_system": "epss", "scoring_elements": "0.05388", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41203" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-613.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-613.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-811.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-811.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-396.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-396.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/368af875869a204b4ac552b9ddda59f6a46a56ec", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/368af875869a204b4ac552b9ddda59f6a46a56ec" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/abcced051cb1bd8fb05046ac3b6023a7ebcc4578", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/abcced051cb1bd8fb05046ac3b6023a7ebcc4578" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/b619c6f865715ca3b15ef1842b5b95edbaa710ad", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/b619c6f865715ca3b15ef1842b5b95edbaa710ad" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/e8dc63704c88007ee4713076605c90188d66f3d2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/e8dc63704c88007ee4713076605c90188d66f3d2" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7pxj-m4jf-r6h2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7pxj-m4jf-r6h2" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41203", "reference_id": "CVE-2021-41203", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41203" }, { "reference_url": "https://github.com/advisories/GHSA-7pxj-m4jf-r6h2", "reference_id": "GHSA-7pxj-m4jf-r6h2", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7pxj-m4jf-r6h2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41203", "CVE-2021-41203", "GHSA-7pxj-m4jf-r6h2", "PYSEC-2021-396", "PYSEC-2021-613", "PYSEC-2021-811" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-myjm-gbbc-qucg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201024?format=api", "vulnerability_id": "VCID-nekm-7jcz-a3au", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36002", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36002" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/4419d10d576adefa36b0e0a9425d2569f7c0189f", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/4419d10d576adefa36b0e0a9425d2569f7c0189f" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36002", "reference_id": "CVE-2022-36002", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36002" }, { "reference_url": "https://github.com/advisories/GHSA-mh3m-62v7-68xg", "reference_id": "GHSA-mh3m-62v7-68xg", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mh3m-62v7-68xg" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mh3m-62v7-68xg", "reference_id": "GHSA-mh3m-62v7-68xg", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mh3m-62v7-68xg" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36002", "GHSA-mh3m-62v7-68xg" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nekm-7jcz-a3au" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3226?format=api", "vulnerability_id": "VCID-nfr9-fgdn-4kh8", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41222", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04734", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41222" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-631.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-631.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-829.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-829.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-414.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-414.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/25d622ffc432acc736b14ca3904177579e733cc6", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/25d622ffc432acc736b14ca3904177579e733cc6" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cpf4-wx82-gxp6", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cpf4-wx82-gxp6" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41222", "reference_id": "CVE-2021-41222", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41222" }, { "reference_url": "https://github.com/advisories/GHSA-cpf4-wx82-gxp6", "reference_id": "GHSA-cpf4-wx82-gxp6", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cpf4-wx82-gxp6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41222", "CVE-2021-41222", "GHSA-cpf4-wx82-gxp6", "PYSEC-2021-414", "PYSEC-2021-631", "PYSEC-2021-829" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nfr9-fgdn-4kh8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200990?format=api", "vulnerability_id": "VCID-nwcb-zuc2-hudk", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35968", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0007", "scoring_system": "epss", "scoring_elements": "0.21629", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35968" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/3a6ac52664c6c095aa2b114e742b0aa17fdce78f", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:38Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/3a6ac52664c6c095aa2b114e742b0aa17fdce78f" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35968", "reference_id": "CVE-2022-35968", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35968" }, { "reference_url": "https://github.com/advisories/GHSA-2475-53vw-vp25", "reference_id": "GHSA-2475-53vw-vp25", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-2475-53vw-vp25" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2475-53vw-vp25", "reference_id": "GHSA-2475-53vw-vp25", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:38Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2475-53vw-vp25" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35968", "GHSA-2475-53vw-vp25" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nwcb-zuc2-hudk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200966?format=api", "vulnerability_id": "VCID-nymb-futt-vqgf", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35941", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00191", "scoring_system": "epss", "scoring_elements": "0.40776", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35941" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/avgpooling_op.cc#L56-L98", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:06Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/avgpooling_op.cc#L56-L98" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/3a6ac52664c6c095aa2b114e742b0aa17fdce78f", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:06Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/3a6ac52664c6c095aa2b114e742b0aa17fdce78f" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35941", "reference_id": "CVE-2022-35941", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35941" }, { "reference_url": "https://github.com/advisories/GHSA-mgmh-g2v6-mqw5", "reference_id": "GHSA-mgmh-g2v6-mqw5", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mgmh-g2v6-mqw5" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mgmh-g2v6-mqw5", "reference_id": "GHSA-mgmh-g2v6-mqw5", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:06Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mgmh-g2v6-mqw5" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79208?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.2" } ], "aliases": [ "CVE-2022-35941", "GHSA-mgmh-g2v6-mqw5" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nymb-futt-vqgf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200986?format=api", "vulnerability_id": "VCID-q2n9-eckv-jubc", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35964", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.127", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35964" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/2a458fc4866505be27c62f81474ecb2b870498fa", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:46Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/2a458fc4866505be27c62f81474ecb2b870498fa" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35964", "reference_id": "CVE-2022-35964", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35964" }, { "reference_url": "https://github.com/advisories/GHSA-f7r5-q7cx-h668", "reference_id": "GHSA-f7r5-q7cx-h668", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f7r5-q7cx-h668" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f7r5-q7cx-h668", "reference_id": "GHSA-f7r5-q7cx-h668", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:46Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f7r5-q7cx-h668" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35964", "GHSA-f7r5-q7cx-h668" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-q2n9-eckv-jubc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3251?format=api", "vulnerability_id": "VCID-qdnt-cg25-5kdx", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41197", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.06691", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41197" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-607.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-607.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-805.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-805.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-390.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-390.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/7c1692bd417eb4f9b33ead749a41166d6080af85", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/7c1692bd417eb4f9b33ead749a41166d6080af85" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/a871989d7b6c18cdebf2fb4f0e5c5b62fbc19edf", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/a871989d7b6c18cdebf2fb4f0e5c5b62fbc19edf" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/d81b1351da3e8c884ff836b64458d94e4a157c15", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/d81b1351da3e8c884ff836b64458d94e4a157c15" }, { "reference_url": "https://github.com/tensorflow/tensorflow/issues/46890", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/issues/46890" }, { "reference_url": "https://github.com/tensorflow/tensorflow/issues/51908", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/issues/51908" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-prcg-wp5q-rv7p", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-prcg-wp5q-rv7p" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41197", "reference_id": "CVE-2021-41197", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41197" }, { "reference_url": "https://github.com/advisories/GHSA-prcg-wp5q-rv7p", "reference_id": "GHSA-prcg-wp5q-rv7p", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-prcg-wp5q-rv7p" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41197", "CVE-2021-41197", "GHSA-prcg-wp5q-rv7p", "PYSEC-2021-390", "PYSEC-2021-607", "PYSEC-2021-805" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qdnt-cg25-5kdx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3252?format=api", "vulnerability_id": "VCID-qvnc-gzf6-y3f3", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41196", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00049", "scoring_system": "epss", "scoring_elements": "0.15532", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41196" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-606.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-606.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-804.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-804.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-389.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-389.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/12b1ff82b3f26ff8de17e58703231d5a02ef1b8b", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/12b1ff82b3f26ff8de17e58703231d5a02ef1b8b" }, { "reference_url": "https://github.com/tensorflow/tensorflow/issues/51936", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/issues/51936" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m539-j985-hcr8", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m539-j985-hcr8" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41196", "reference_id": "CVE-2021-41196", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41196" }, { "reference_url": "https://github.com/advisories/GHSA-m539-j985-hcr8", "reference_id": "GHSA-m539-j985-hcr8", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m539-j985-hcr8" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41196", "CVE-2021-41196", "GHSA-m539-j985-hcr8", "PYSEC-2021-389", "PYSEC-2021-606", "PYSEC-2021-804" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qvnc-gzf6-y3f3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201038?format=api", "vulnerability_id": "VCID-re7v-rdvx-9bav", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36016", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00191", "scoring_system": "epss", "scoring_elements": "0.40776", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36016" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ops/math_ops.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:24Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ops/math_ops.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/6104f0d4091c260ce9352f9155f7e9b725eab012", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:24Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/6104f0d4091c260ce9352f9155f7e9b725eab012" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36016", "reference_id": "CVE-2022-36016", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36016" }, { "reference_url": "https://github.com/advisories/GHSA-g468-qj8g-vcjc", "reference_id": "GHSA-g468-qj8g-vcjc", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-g468-qj8g-vcjc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g468-qj8g-vcjc", "reference_id": "GHSA-g468-qj8g-vcjc", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:24Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g468-qj8g-vcjc" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36016", "GHSA-g468-qj8g-vcjc" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-re7v-rdvx-9bav" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3230?format=api", "vulnerability_id": "VCID-rkx2-5nyj-bbhu", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41218", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04734", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41218" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-627.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-627.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-825.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-825.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-410.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-410.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/a8ad3e5e79c75f36edb81e0ba3f3c0c5442aeddc", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/a8ad3e5e79c75f36edb81e0ba3f3c0c5442aeddc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9crf-c6qr-r273", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9crf-c6qr-r273" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41218", "reference_id": "CVE-2021-41218", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41218" }, { "reference_url": "https://github.com/advisories/GHSA-9crf-c6qr-r273", "reference_id": "GHSA-9crf-c6qr-r273", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9crf-c6qr-r273" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41218", "CVE-2021-41218", "GHSA-9crf-c6qr-r273", "PYSEC-2021-410", "PYSEC-2021-627", "PYSEC-2021-825" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rkx2-5nyj-bbhu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3235?format=api", "vulnerability_id": "VCID-rr2a-8jrx-6ue8", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41213", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00043", "scoring_system": "epss", "scoring_elements": "0.13618", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41213" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-622.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-622.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-820.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-820.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-405.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-405.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/afac8158d43691661ad083f6dd9e56f327c1dcb7", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/afac8158d43691661ad083f6dd9e56f327c1dcb7" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h67m-xg8f-fxcf", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h67m-xg8f-fxcf" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41213", "reference_id": "CVE-2021-41213", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41213" }, { "reference_url": "https://github.com/advisories/GHSA-h67m-xg8f-fxcf", "reference_id": "GHSA-h67m-xg8f-fxcf", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-h67m-xg8f-fxcf" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41213", "CVE-2021-41213", "GHSA-h67m-xg8f-fxcf", "PYSEC-2021-405", "PYSEC-2021-622", "PYSEC-2021-820" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rr2a-8jrx-6ue8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201047?format=api", "vulnerability_id": "VCID-rsm8-1q5j-7yac", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36026", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36026" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/f3f9cb38ecfe5a8a703f2c4a8fead434ef291713", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:43Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/f3f9cb38ecfe5a8a703f2c4a8fead434ef291713" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36026", "reference_id": "CVE-2022-36026", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36026" }, { "reference_url": "https://github.com/advisories/GHSA-9cr2-8pwr-fhfq", "reference_id": "GHSA-9cr2-8pwr-fhfq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9cr2-8pwr-fhfq" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9cr2-8pwr-fhfq", "reference_id": "GHSA-9cr2-8pwr-fhfq", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:58:43Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9cr2-8pwr-fhfq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36026", "GHSA-9cr2-8pwr-fhfq" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rsm8-1q5j-7yac" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8313?format=api", "vulnerability_id": "VCID-rt4b-xxm6-xubs", "summary": "Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering a `StatusOr` value that is an error and forcibly extracting the value from it. We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-23590", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00239", "scoring_system": "epss", "scoring_elements": "0.47086", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-23590" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-99.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-99.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-154.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-154.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L560-L567", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:51:26Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L560-L567" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/955059813cc325dc1db5e2daa6221271406d4439", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:51:26Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/955059813cc325dc1db5e2daa6221271406d4439" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pqrv-8r2f-7278", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:51:26Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pqrv-8r2f-7278" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23590", "reference_id": "CVE-2022-23590", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23590" }, { "reference_url": "https://github.com/advisories/GHSA-pqrv-8r2f-7278", "reference_id": "GHSA-pqrv-8r2f-7278", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-pqrv-8r2f-7278" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25376?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1" } ], "aliases": [ "BIT-tensorflow-2022-23590", "CVE-2022-23590", "GHSA-pqrv-8r2f-7278", "PYSEC-2022-154", "PYSEC-2022-99" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rt4b-xxm6-xubs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3223?format=api", "vulnerability_id": "VCID-rujq-67w1-u3g7", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41225", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00018", "scoring_system": "epss", "scoring_elements": "0.05281", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41225" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-634.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-634.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-832.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-832.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-417.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-417.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/68867bf01239d9e1048f98cbad185bf4761bedd3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/68867bf01239d9e1048f98cbad185bf4761bedd3" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7r94-xv9v-63jw", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7r94-xv9v-63jw" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41225", "reference_id": "CVE-2021-41225", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41225" }, { "reference_url": "https://github.com/advisories/GHSA-7r94-xv9v-63jw", "reference_id": "GHSA-7r94-xv9v-63jw", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7r94-xv9v-63jw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41225", "CVE-2021-41225", "GHSA-7r94-xv9v-63jw", "PYSEC-2021-417", "PYSEC-2021-634", "PYSEC-2021-832" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rujq-67w1-u3g7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205534?format=api", "vulnerability_id": "VCID-rzxq-vcmu-m7h5", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41897", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0015", "scoring_system": "epss", "scoring_elements": "0.35228", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41897" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/fractional_max_pool_op.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:01Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/fractional_max_pool_op.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/d71090c3e5ca325bdf4b02eb236cfb3ee823e927", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:01Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/d71090c3e5ca325bdf4b02eb236cfb3ee823e927" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41897", "reference_id": "CVE-2022-41897", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41897" }, { "reference_url": "https://github.com/advisories/GHSA-f2w8-jw48-fr7j", "reference_id": "GHSA-f2w8-jw48-fr7j", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f2w8-jw48-fr7j" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f2w8-jw48-fr7j", "reference_id": "GHSA-f2w8-jw48-fr7j", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:01Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f2w8-jw48-fr7j" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41897", "GHSA-f2w8-jw48-fr7j" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rzxq-vcmu-m7h5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17164?format=api", "vulnerability_id": "VCID-s8hv-3hsb-mfca", "summary": "Incorrect Comparison\nTensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater `filter_input_channel` of less than 1 gives a FPE. This issue has been patched in version 2.12. TensorFlow will also cherrypick the fix commit on TensorFlow 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-27579", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00206", "scoring_system": "epss", "scoring_elements": "0.42803", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-27579" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/34f8368c535253f5c9cb3a303297743b62442aaa", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:44:58Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/34f8368c535253f5c9cb3a303297743b62442aaa" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27579", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-27579" }, { "reference_url": "https://github.com/advisories/GHSA-5w96-866f-6rm8", "reference_id": "GHSA-5w96-866f-6rm8", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5w96-866f-6rm8" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5w96-866f-6rm8", "reference_id": "GHSA-5w96-866f-6rm8", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:44:58Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5w96-866f-6rm8" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-27579", "GHSA-5w96-866f-6rm8" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s8hv-3hsb-mfca" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3233?format=api", "vulnerability_id": "VCID-sb7m-pngm-5fbj", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41215", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.04734", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41215" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-624.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-624.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-822.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-822.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-407.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-407.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/d3738dd70f1c9ceb547258cbb82d853da8771850", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/d3738dd70f1c9ceb547258cbb82d853da8771850" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x3v8-c8qx-3j3r", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x3v8-c8qx-3j3r" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41215", "reference_id": "CVE-2021-41215", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41215" }, { "reference_url": "https://github.com/advisories/GHSA-x3v8-c8qx-3j3r", "reference_id": "GHSA-x3v8-c8qx-3j3r", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x3v8-c8qx-3j3r" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41215", "CVE-2021-41215", "GHSA-x3v8-c8qx-3j3r", "PYSEC-2021-407", "PYSEC-2021-624", "PYSEC-2021-822" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sb7m-pngm-5fbj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200965?format=api", "vulnerability_id": "VCID-sb8m-6jmx-bkh4", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35940", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00191", "scoring_system": "epss", "scoring_elements": "0.40776", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35940" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/0b6b491d21d6a4eb5fbab1cca565bc1e94ca9543/tensorflow/core/kernels/ragged_range_op.cc#L74-L88", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:04Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/0b6b491d21d6a4eb5fbab1cca565bc1e94ca9543/tensorflow/core/kernels/ragged_range_op.cc#L74-L88" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/37cefa91bee4eace55715eeef43720b958a01192", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:04Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/37cefa91bee4eace55715eeef43720b958a01192" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35940", "reference_id": "CVE-2022-35940", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35940" }, { "reference_url": "https://github.com/advisories/GHSA-x989-q2pq-4q5x", "reference_id": "GHSA-x989-q2pq-4q5x", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x989-q2pq-4q5x" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x989-q2pq-4q5x", "reference_id": "GHSA-x989-q2pq-4q5x", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:04Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x989-q2pq-4q5x" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35940", "GHSA-x989-q2pq-4q5x" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sb8m-6jmx-bkh4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201014?format=api", "vulnerability_id": "VCID-ss5q-9rxf-pygf", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35992", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35992" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/3db59a042a38f4338aa207922fa2f476e000a6ee", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/3db59a042a38f4338aa207922fa2f476e000a6ee" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35992", "reference_id": "CVE-2022-35992", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35992" }, { "reference_url": "https://github.com/advisories/GHSA-9v8w-xmr4-wgxp", "reference_id": "GHSA-9v8w-xmr4-wgxp", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9v8w-xmr4-wgxp" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9v8w-xmr4-wgxp", "reference_id": "GHSA-9v8w-xmr4-wgxp", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9v8w-xmr4-wgxp" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35992", "GHSA-9v8w-xmr4-wgxp" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ss5q-9rxf-pygf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205518?format=api", "vulnerability_id": "VCID-svbx-mnnb-eqbg", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41880", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0016", "scoring_system": "epss", "scoring_elements": "0.366", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41880" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/candidate_sampler_ops.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:45Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/candidate_sampler_ops.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/b389f5c944cadfdfe599b3f1e4026e036f30d2d4", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:45Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/b389f5c944cadfdfe599b3f1e4026e036f30d2d4" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41880", "reference_id": "CVE-2022-41880", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41880" }, { "reference_url": "https://github.com/advisories/GHSA-8w5g-3wcv-9g2j", "reference_id": "GHSA-8w5g-3wcv-9g2j", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8w5g-3wcv-9g2j" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8w5g-3wcv-9g2j", "reference_id": "GHSA-8w5g-3wcv-9g2j", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:45Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8w5g-3wcv-9g2j" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41880", "GHSA-8w5g-3wcv-9g2j" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-svbx-mnnb-eqbg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17172?format=api", "vulnerability_id": "VCID-sxk5-athp-f7f1", "summary": "NULL Pointer Dereference\nTensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle scalars in the `values` parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25672", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00105", "scoring_system": "epss", "scoring_elements": "0.28245", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25672" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/980b22536abcbbe1b4a5642fc940af33d8c19b69", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:14:12Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/980b22536abcbbe1b4a5642fc940af33d8c19b69" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25672", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25672" }, { "reference_url": "https://github.com/advisories/GHSA-94mm-g2mv-8p7r", "reference_id": "GHSA-94mm-g2mv-8p7r", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-94mm-g2mv-8p7r" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-94mm-g2mv-8p7r", "reference_id": "GHSA-94mm-g2mv-8p7r", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:14:12Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-94mm-g2mv-8p7r" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25672", "GHSA-94mm-g2mv-8p7r" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sxk5-athp-f7f1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17165?format=api", "vulnerability_id": "VCID-u133-f98p-zqec", "summary": "Incorrect Comparison\nTensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.Bincount` segfaults when given a parameter `weights` that is neither the same shape as parameter `arr` nor a length-0 tensor. A fix is included in TensorFlow 2.12.0 and 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25675", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00206", "scoring_system": "epss", "scoring_elements": "0.42803", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25675" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/8ae76cf085f4be26295d2ecf2081e759e04b8acf", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:23:26Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/8ae76cf085f4be26295d2ecf2081e759e04b8acf" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25675", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25675" }, { "reference_url": "https://github.com/advisories/GHSA-7x4v-9gxg-9hwj", "reference_id": "GHSA-7x4v-9gxg-9hwj", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7x4v-9gxg-9hwj" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7x4v-9gxg-9hwj", "reference_id": "GHSA-7x4v-9gxg-9hwj", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:23:26Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7x4v-9gxg-9hwj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25675", "GHSA-7x4v-9gxg-9hwj" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u133-f98p-zqec" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201025?format=api", "vulnerability_id": "VCID-uh53-ed93-cfhj", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36003", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36003" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/552bfced6ce4809db5f3ca305f60ff80dd40c5a3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/552bfced6ce4809db5f3ca305f60ff80dd40c5a3" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36003", "reference_id": "CVE-2022-36003", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36003" }, { "reference_url": "https://github.com/advisories/GHSA-cv2p-32v3-vhwq", "reference_id": "GHSA-cv2p-32v3-vhwq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cv2p-32v3-vhwq" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cv2p-32v3-vhwq", "reference_id": "GHSA-cv2p-32v3-vhwq", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cv2p-32v3-vhwq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36003", "GHSA-cv2p-32v3-vhwq" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uh53-ed93-cfhj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200981?format=api", "vulnerability_id": "VCID-unq7-3j4j-q3ew", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35959", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35959" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/9178ac9d6389bdc54638ab913ea0e419234d14eb", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:58Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/9178ac9d6389bdc54638ab913ea0e419234d14eb" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35959", "reference_id": "CVE-2022-35959", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35959" }, { "reference_url": "https://github.com/advisories/GHSA-wxjj-cgcx-r3vq", "reference_id": "GHSA-wxjj-cgcx-r3vq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-wxjj-cgcx-r3vq" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wxjj-cgcx-r3vq", "reference_id": "GHSA-wxjj-cgcx-r3vq", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:58Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wxjj-cgcx-r3vq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35959", "GHSA-wxjj-cgcx-r3vq" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-unq7-3j4j-q3ew" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17158?format=api", "vulnerability_id": "VCID-uwq2-a5hb-9fhd", "summary": "Out-of-bounds Read\nTensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, an out-of-bounds read is in GRUBlockCellGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25658", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00053", "scoring_system": "epss", "scoring_elements": "0.16979", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25658" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/ff459137c2716a2a60f7d441b855fcb466d778cb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:13:25Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/ff459137c2716a2a60f7d441b855fcb466d778cb" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25658", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25658" }, { "reference_url": "https://github.com/advisories/GHSA-68v3-g9cm-rmm6", "reference_id": "GHSA-68v3-g9cm-rmm6", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-68v3-g9cm-rmm6" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-68v3-g9cm-rmm6", "reference_id": "GHSA-68v3-g9cm-rmm6", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-19T20:13:25Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-68v3-g9cm-rmm6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25658", "GHSA-68v3-g9cm-rmm6" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uwq2-a5hb-9fhd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205523?format=api", "vulnerability_id": "VCID-ux3x-2756-n3av", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41885", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00168", "scoring_system": "epss", "scoring_elements": "0.37743", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41885" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/conv_ops_fused_image_transform.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:36Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/conv_ops_fused_image_transform.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/d66e1d568275e6a2947de97dca7a102a211e01ce", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:36Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/d66e1d568275e6a2947de97dca7a102a211e01ce" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41885", "reference_id": "CVE-2022-41885", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41885" }, { "reference_url": "https://github.com/advisories/GHSA-762h-vpvw-3rcx", "reference_id": "GHSA-762h-vpvw-3rcx", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-762h-vpvw-3rcx" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-762h-vpvw-3rcx", "reference_id": "GHSA-762h-vpvw-3rcx", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:36Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-762h-vpvw-3rcx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80027?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-41885", "GHSA-762h-vpvw-3rcx" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ux3x-2756-n3av" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17175?format=api", "vulnerability_id": "VCID-uxg4-9qfy-tbg6", "summary": "Double Free\nTensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_max_pool_v2` require the first and fourth elements of their parameter `pooling_ratio` to be equal to 1.0, as pooling on batch and channel dimensions is not supported. A fix is included in TensorFlow 2.12.0 and 2.11.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25801", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00088", "scoring_system": "epss", "scoring_elements": "0.25146", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-25801" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/ee50d1e00f81f62a4517453f721c634bbb478307", "reference_id": "", "reference_type": "", "scores": [ { "value": "8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" }, { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-19T20:44:21Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/ee50d1e00f81f62a4517453f721c634bbb478307" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25801", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25801" }, { "reference_url": "https://github.com/advisories/GHSA-f49c-87jh-g47q", "reference_id": "GHSA-f49c-87jh-g47q", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f49c-87jh-g47q" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f49c-87jh-g47q", "reference_id": "GHSA-f49c-87jh-g47q", "reference_type": "", "scores": [ { "value": "8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" }, { "value": "8.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-19T20:44:21Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f49c-87jh-g47q" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63220?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.11.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.11.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/594725?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.12.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6nyr-2edx-5qg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.12.0" } ], "aliases": [ "CVE-2023-25801", "GHSA-f49c-87jh-g47q" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uxg4-9qfy-tbg6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200962?format=api", "vulnerability_id": "VCID-v6cz-tyns-73br", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35937", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31546", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35937" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/f463040eb3997e42e60a2ffc6dc72de7ef11dbb4/tensorflow/lite/kernels/gather_nd.cc#L105-L111", "reference_id": "", "reference_type": "", "scores": [ { "value": "7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:09Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/f463040eb3997e42e60a2ffc6dc72de7ef11dbb4/tensorflow/lite/kernels/gather_nd.cc#L105-L111" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/595a65a3e224a0362d7e68c2213acfc2b499a196", "reference_id": "", "reference_type": "", "scores": [ { "value": "7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:09Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/595a65a3e224a0362d7e68c2213acfc2b499a196" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35937", "reference_id": "CVE-2022-35937", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35937" }, { "reference_url": "https://github.com/advisories/GHSA-pxrw-j2fv-hx3h", "reference_id": "GHSA-pxrw-j2fv-hx3h", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-pxrw-j2fv-hx3h" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pxrw-j2fv-hx3h", "reference_id": "GHSA-pxrw-j2fv-hx3h", "reference_type": "", "scores": [ { "value": "7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:09Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pxrw-j2fv-hx3h" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35937", "GHSA-pxrw-j2fv-hx3h" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v6cz-tyns-73br" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205543?format=api", "vulnerability_id": "VCID-vbq8-42vx-b3hz", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41907", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35076", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41907" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/resize_nearest_neighbor_op.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:43Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/resize_nearest_neighbor_op.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/00c821af032ba9e5f5fa3fe14690c8d28a657624", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:43Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/00c821af032ba9e5f5fa3fe14690c8d28a657624" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41907", "reference_id": "CVE-2022-41907", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41907" }, { "reference_url": "https://github.com/advisories/GHSA-368v-7v32-52fx", "reference_id": "GHSA-368v-7v32-52fx", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-368v-7v32-52fx" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-368v-7v32-52fx", "reference_id": "GHSA-368v-7v32-52fx", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:43Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-368v-7v32-52fx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41907", "GHSA-368v-7v32-52fx" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vbq8-42vx-b3hz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3240?format=api", "vulnerability_id": "VCID-w2ns-kqmv-xfan", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41208", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01882", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41208" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-617.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-617.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-815.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-815.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-400.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-400.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/5c8c9a8bfe750f9743d0c859bae112060b216f5c", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/5c8c9a8bfe750f9743d0c859bae112060b216f5c" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-57wx-m983-2f88", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-57wx-m983-2f88" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41208", "reference_id": "CVE-2021-41208", "reference_type": "", "scores": [ { "value": "9.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41208" }, { "reference_url": "https://github.com/advisories/GHSA-57wx-m983-2f88", "reference_id": "GHSA-57wx-m983-2f88", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-57wx-m983-2f88" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41208", "CVE-2021-41208", "GHSA-57wx-m983-2f88", "PYSEC-2021-400", "PYSEC-2021-617", "PYSEC-2021-815" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w2ns-kqmv-xfan" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201048?format=api", "vulnerability_id": "VCID-wm5z-8hpe-1ug6", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36027", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00267", "scoring_system": "epss", "scoring_elements": "0.50332", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36027" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/aa0b852a4588cea4d36b74feb05d93055540b450", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:44:16Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/aa0b852a4588cea4d36b74feb05d93055540b450" }, { "reference_url": "https://github.com/tensorflow/tensorflow/issues/53767", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:44:16Z/" } ], "url": "https://github.com/tensorflow/tensorflow/issues/53767" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36027", "reference_id": "CVE-2022-36027", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36027" }, { "reference_url": "https://github.com/advisories/GHSA-79h2-q768-fpxr", "reference_id": "GHSA-79h2-q768-fpxr", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-79h2-q768-fpxr" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-79h2-q768-fpxr", "reference_id": "GHSA-79h2-q768-fpxr", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:44:16Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-79h2-q768-fpxr" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36027", "GHSA-79h2-q768-fpxr" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wm5z-8hpe-1ug6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201036?format=api", "vulnerability_id": "VCID-x1r9-72db-xqf6", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36014", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00333", "scoring_system": "epss", "scoring_elements": "0.56408", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36014" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ir/importexport/graphdef_import.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ir/importexport/graphdef_import.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/3a754740d5414e362512ee981eefba41561a63a6", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/3a754740d5414e362512ee981eefba41561a63a6" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/a0f0b9a21c9270930457095092f558fbad4c03e5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/a0f0b9a21c9270930457095092f558fbad4c03e5" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36014", "reference_id": "CVE-2022-36014", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36014" }, { "reference_url": "https://github.com/advisories/GHSA-7j3m-8g3c-9qqq", "reference_id": "GHSA-7j3m-8g3c-9qqq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7j3m-8g3c-9qqq" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7j3m-8g3c-9qqq", "reference_id": "GHSA-7j3m-8g3c-9qqq", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7j3m-8g3c-9qqq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36014", "GHSA-7j3m-8g3c-9qqq" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x1r9-72db-xqf6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3247?format=api", "vulnerability_id": "VCID-xbt8-r95u-sqbu", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41201", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.06636", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41201" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-611.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-611.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-809.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-809.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-394.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-394.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/f09caa532b6e1ac8d2aa61b7832c78c5b79300c6", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/f09caa532b6e1ac8d2aa61b7832c78c5b79300c6" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j86v-p27c-73fm", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j86v-p27c-73fm" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41201", "reference_id": "CVE-2021-41201", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.5", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41201" }, { "reference_url": "https://github.com/advisories/GHSA-j86v-p27c-73fm", "reference_id": "GHSA-j86v-p27c-73fm", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-j86v-p27c-73fm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41201", "CVE-2021-41201", "GHSA-j86v-p27c-73fm", "PYSEC-2021-394", "PYSEC-2021-611", "PYSEC-2021-809" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xbt8-r95u-sqbu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205545?format=api", "vulnerability_id": "VCID-xp3m-ntp9-6bf4", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41909", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00484", "scoring_system": "epss", "scoring_elements": "0.65567", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41909" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/python/lib/core/py_func.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:35Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/python/lib/core/py_func.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/660ce5a89eb6766834bdc303d2ab3902aef99d3d", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:35Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/660ce5a89eb6766834bdc303d2ab3902aef99d3d" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/bf594d08d377dc6a3354d9fdb494b32d45f91971", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:35Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/bf594d08d377dc6a3354d9fdb494b32d45f91971" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41909", "reference_id": "CVE-2022-41909", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41909" }, { "reference_url": "https://github.com/advisories/GHSA-rjx6-v474-2ch9", "reference_id": "GHSA-rjx6-v474-2ch9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rjx6-v474-2ch9" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rjx6-v474-2ch9", "reference_id": "GHSA-rjx6-v474-2ch9", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:41:35Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rjx6-v474-2ch9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41909", "GHSA-rjx6-v474-2ch9" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xp3m-ntp9-6bf4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201011?format=api", "vulnerability_id": "VCID-y5s1-jyr5-eqfa", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35989", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35989" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/32d7bd3defd134f21a4e344c8dfd40099aaf6b18", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:09Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/32d7bd3defd134f21a4e344c8dfd40099aaf6b18" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35989", "reference_id": "CVE-2022-35989", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35989" }, { "reference_url": "https://github.com/advisories/GHSA-j43h-pgmg-5hjq", "reference_id": "GHSA-j43h-pgmg-5hjq", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-j43h-pgmg-5hjq" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j43h-pgmg-5hjq", "reference_id": "GHSA-j43h-pgmg-5hjq", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:09Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j43h-pgmg-5hjq" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35989", "GHSA-j43h-pgmg-5hjq" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y5s1-jyr5-eqfa" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3236?format=api", "vulnerability_id": "VCID-y7hx-h69v-wfcy", "summary": "multiple issues", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41212", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00019", "scoring_system": "epss", "scoring_elements": "0.05349", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-41212" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-621.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-621.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-819.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-819.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-404.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-404.yaml" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fr77-rrx3-cp7g", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fr77-rrx3-cp7g" }, { "reference_url": "https://security.archlinux.org/AVG-2529", "reference_id": "AVG-2529", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2529" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41212", "reference_id": "CVE-2021-41212", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41212" }, { "reference_url": "https://github.com/advisories/GHSA-fr77-rrx3-cp7g", "reference_id": "GHSA-fr77-rrx3-cp7g", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fr77-rrx3-cp7g" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23636?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11qd-d7c7-sbdm" }, { "vulnerability": "VCID-145d-k5w3-tfgz" }, { "vulnerability": "VCID-15h4-876j-3bdz" }, { "vulnerability": "VCID-15nt-6tff-k7gb" }, { "vulnerability": "VCID-1ah5-hm7a-ykep" }, { "vulnerability": "VCID-1hbp-9n5x-tyda" }, { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-1w3g-z5ja-q7cr" }, { "vulnerability": "VCID-21pb-qyv3-27cj" }, { "vulnerability": "VCID-2311-hknw-2ubh" }, { "vulnerability": "VCID-2tx7-szke-f7d8" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-32uz-pmsu-dycn" }, { "vulnerability": "VCID-39ck-bm9t-kqhs" }, { "vulnerability": "VCID-3czq-3twf-skcg" }, { "vulnerability": "VCID-3dun-j9ep-3ugk" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3fd6-8rv4-8qh3" }, { "vulnerability": "VCID-3g5a-5csn-h3d9" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-41ax-nrcf-yygf" }, { "vulnerability": "VCID-466y-e26r-rka4" }, { "vulnerability": "VCID-4fcy-hbcs-cuan" }, { "vulnerability": "VCID-4mky-qp2e-vbhg" }, { "vulnerability": "VCID-4sj6-vagv-2qe4" }, { "vulnerability": "VCID-4tyf-xfhm-d3cm" }, { "vulnerability": "VCID-4xpd-4a11-k3b7" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-5tpp-sf62-zycs" }, { "vulnerability": "VCID-62er-23uz-6qgu" }, { "vulnerability": "VCID-62y1-pd1b-vqhr" }, { "vulnerability": "VCID-6888-uhtp-8ub6" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6gnj-az99-h7b4" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7cu6-jt1f-q7hq" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-7nkk-5pdm-uyck" }, { "vulnerability": "VCID-7uu3-mfan-4ue5" }, { "vulnerability": "VCID-83pe-ztey-dbf4" }, { "vulnerability": "VCID-83t5-dg3c-5qa2" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-8dwk-hykt-93a5" }, { "vulnerability": "VCID-8zqb-tqfq-7ud7" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-97cs-4kx3-37gm" }, { "vulnerability": "VCID-9arh-a8wj-wka6" }, { "vulnerability": "VCID-9hzh-a72m-nya3" }, { "vulnerability": "VCID-ah8y-bmdk-5khm" }, { "vulnerability": "VCID-akmu-fas1-33h6" }, { "vulnerability": "VCID-axj7-aq9m-rqdu" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-b4hf-5gqs-yfbw" }, { "vulnerability": "VCID-b9p4-ta3s-wbeu" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-bjrr-3t28-rqgp" }, { "vulnerability": "VCID-bn6z-c98v-n7bf" }, { "vulnerability": "VCID-ccv1-pgda-r7ba" }, { "vulnerability": "VCID-cwvm-wntu-tfck" }, { "vulnerability": "VCID-d1hw-1fdb-kfhq" }, { "vulnerability": "VCID-d3dc-su6w-s3ag" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-degg-b7w4-jyg7" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-djxs-vpxa-5bav" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-e7nb-5swt-r3c9" }, { "vulnerability": "VCID-ebu7-ts8t-43br" }, { "vulnerability": "VCID-egc6-6pwr-fyej" }, { "vulnerability": "VCID-en5f-xtha-cyhp" }, { "vulnerability": "VCID-etu4-tnze-h3ag" }, { "vulnerability": "VCID-ev23-kazv-nkas" }, { "vulnerability": "VCID-ev84-gxjn-6bf1" }, { "vulnerability": "VCID-exym-4mq2-rkbj" }, { "vulnerability": "VCID-eyqx-7k24-zfhq" }, { "vulnerability": "VCID-f25m-udat-n3fd" }, { "vulnerability": "VCID-f3cx-k63z-7qde" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-f8ut-vanr-1qbz" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-fggx-3rzd-8kf5" }, { "vulnerability": "VCID-fr8d-65tt-a7bw" }, { "vulnerability": "VCID-g5zp-g143-a3hk" }, { "vulnerability": "VCID-g7ud-1f9c-u7bn" }, { "vulnerability": "VCID-g8er-52ns-j7b1" }, { "vulnerability": "VCID-g8ts-ghhv-33e3" }, { "vulnerability": "VCID-gg98-zkw8-5ben" }, { "vulnerability": "VCID-gh9u-ufcn-6khx" }, { "vulnerability": "VCID-gnns-f4aa-wuas" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-gqh9-w7d2-r7ap" }, { "vulnerability": "VCID-hdth-hp7r-ebfs" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-hjd9-vujt-g7d2" }, { "vulnerability": "VCID-hujj-6vv2-u3c2" }, { "vulnerability": "VCID-jdud-ufqp-4yg5" }, { "vulnerability": "VCID-jg5r-hv3s-kuh3" }, { "vulnerability": "VCID-jmr2-tp5q-6qau" }, { "vulnerability": "VCID-k3rw-xwzv-1uer" }, { "vulnerability": "VCID-kdhk-ygud-9bft" }, { "vulnerability": "VCID-kjwx-6qbk-37ak" }, { "vulnerability": "VCID-ky4u-eny7-33fy" }, { "vulnerability": "VCID-m4j4-decm-tkb6" }, { "vulnerability": "VCID-m4na-tgrp-d7fk" }, { "vulnerability": "VCID-mrjt-fjbf-gyeh" }, { "vulnerability": "VCID-mtqg-yga8-eqeu" }, { "vulnerability": "VCID-mzvs-ne4v-4qh7" }, { "vulnerability": "VCID-n62z-1akp-ebck" }, { "vulnerability": "VCID-nekm-7jcz-a3au" }, { "vulnerability": "VCID-ngkq-s26c-qkfj" }, { "vulnerability": "VCID-nwcb-zuc2-hudk" }, { "vulnerability": "VCID-nymb-futt-vqgf" }, { "vulnerability": "VCID-pe9p-a7nn-8bhj" }, { "vulnerability": "VCID-q2n9-eckv-jubc" }, { "vulnerability": "VCID-q4zv-syab-bbh8" }, { "vulnerability": "VCID-qgr6-bqrc-puhs" }, { "vulnerability": "VCID-qxqd-f1bw-y7h4" }, { "vulnerability": "VCID-re7v-rdvx-9bav" }, { "vulnerability": "VCID-rgug-8jmj-e7hw" }, { "vulnerability": "VCID-rsau-jvcr-uudd" }, { "vulnerability": "VCID-rsm8-1q5j-7yac" }, { "vulnerability": "VCID-rt4b-xxm6-xubs" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s3fs-8v2b-zqem" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sb8m-6jmx-bkh4" }, { "vulnerability": "VCID-sbpr-dnvt-x7eu" }, { "vulnerability": "VCID-ss5q-9rxf-pygf" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-tru4-6hk6-yydu" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-ugta-nt2s-27fk" }, { "vulnerability": "VCID-uh53-ed93-cfhj" }, { "vulnerability": "VCID-unq7-3j4j-q3ew" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-v2nf-1526-nkbp" }, { "vulnerability": "VCID-v6cz-tyns-73br" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-vfgz-fss4-wbgu" }, { "vulnerability": "VCID-vgv7-xc3c-1fb3" }, { "vulnerability": "VCID-vnn5-y8ez-rub9" }, { "vulnerability": "VCID-vpyd-he5n-b3a4" }, { "vulnerability": "VCID-vqxg-mnz4-13cg" }, { "vulnerability": "VCID-wfh9-ew6v-nyhy" }, { "vulnerability": "VCID-wm5z-8hpe-1ug6" }, { "vulnerability": "VCID-ww95-y388-3ben" }, { "vulnerability": "VCID-x1r9-72db-xqf6" }, { "vulnerability": "VCID-x2t2-4sa6-qygs" }, { "vulnerability": "VCID-x5x3-2cyz-xbhe" }, { "vulnerability": "VCID-xn72-z6kg-q7bp" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-y5s1-jyr5-eqfa" }, { "vulnerability": "VCID-y8ed-ynrx-37af" }, { "vulnerability": "VCID-y9yr-d3rq-97dq" }, { "vulnerability": "VCID-yvag-32h1-yfc5" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-yvef-kyv2-qbea" }, { "vulnerability": "VCID-yx57-74vr-rfes" }, { "vulnerability": "VCID-z5zj-88jh-cked" }, { "vulnerability": "VCID-z6dc-pprc-buar" }, { "vulnerability": "VCID-zc6k-2kds-afht" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-ztrz-qnwj-2fhd" }, { "vulnerability": "VCID-zts1-n99c-cuh1" }, { "vulnerability": "VCID-zun3-rnh3-h3e7" }, { "vulnerability": "VCID-zw94-ns7h-6qg3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0" } ], "aliases": [ "BIT-tensorflow-2021-41212", "CVE-2021-41212", "GHSA-fr77-rrx3-cp7g", "PYSEC-2021-404", "PYSEC-2021-621", "PYSEC-2021-819" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y7hx-h69v-wfcy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200959?format=api", "vulnerability_id": "VCID-y9yr-d3rq-97dq", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35934", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.127", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35934" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/61f0f9b94df8c0411f0ad0ecc2fec2d3f3c33555", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:20Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/61f0f9b94df8c0411f0ad0ecc2fec2d3f3c33555" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35934", "reference_id": "CVE-2022-35934", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35934" }, { "reference_url": "https://github.com/advisories/GHSA-f4w6-h4f5-wx45", "reference_id": "GHSA-f4w6-h4f5-wx45", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-f4w6-h4f5-wx45" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f4w6-h4f5-wx45", "reference_id": "GHSA-f4w6-h4f5-wx45", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:00:20Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f4w6-h4f5-wx45" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35934", "GHSA-f4w6-h4f5-wx45" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y9yr-d3rq-97dq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205526?format=api", "vulnerability_id": "VCID-yvdh-xkxd-uyb2", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41888", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0024", "scoring_system": "epss", "scoring_elements": "0.47451", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41888" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/generate_box_proposals_op.cu.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:26Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/generate_box_proposals_op.cu.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/cf35502463a88ca7185a99daa7031df60b3c1c98", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:26Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/cf35502463a88ca7185a99daa7031df60b3c1c98" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41888", "reference_id": "CVE-2022-41888", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41888" }, { "reference_url": "https://github.com/advisories/GHSA-6x99-gv2v-q76v", "reference_id": "GHSA-6x99-gv2v-q76v", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6x99-gv2v-q76v" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6x99-gv2v-q76v", "reference_id": "GHSA-6x99-gv2v-q76v", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:26Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6x99-gv2v-q76v" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41888", "GHSA-6x99-gv2v-q76v" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yvdh-xkxd-uyb2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201037?format=api", "vulnerability_id": "VCID-z5zj-88jh-cked", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36015", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00191", "scoring_system": "epss", "scoring_elements": "0.40776", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36015" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ops/math_ops.cc", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:57:39Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ops/math_ops.cc" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/37e64539cd29fcfb814c4451152a60f5d107b0f0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:57:39Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/37e64539cd29fcfb814c4451152a60f5d107b0f0" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36015", "reference_id": "CVE-2022-36015", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36015" }, { "reference_url": "https://github.com/advisories/GHSA-rh87-q4vg-m45j", "reference_id": "GHSA-rh87-q4vg-m45j", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rh87-q4vg-m45j" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rh87-q4vg-m45j", "reference_id": "GHSA-rh87-q4vg-m45j", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:57:39Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rh87-q4vg-m45j" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-36015", "GHSA-rh87-q4vg-m45j" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z5zj-88jh-cked" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200988?format=api", "vulnerability_id": "VCID-z6dc-pprc-buar", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35966", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35966" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/7cdf9d4d2083b739ec81cfdace546b0c99f50622", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:40Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/7cdf9d4d2083b739ec81cfdace546b0c99f50622" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35966", "reference_id": "CVE-2022-35966", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35966" }, { "reference_url": "https://github.com/advisories/GHSA-4w68-4x85-mjj9", "reference_id": "GHSA-4w68-4x85-mjj9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4w68-4x85-mjj9" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4w68-4x85-mjj9", "reference_id": "GHSA-4w68-4x85-mjj9", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:40Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4w68-4x85-mjj9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35966", "GHSA-4w68-4x85-mjj9" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z6dc-pprc-buar" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/200993?format=api", "vulnerability_id": "VCID-zc6k-2kds-afht", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35971", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35971" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:30Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35971", "reference_id": "CVE-2022-35971", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35971" }, { "reference_url": "https://github.com/advisories/GHSA-9fpg-838v-wpv7", "reference_id": "GHSA-9fpg-838v-wpv7", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9fpg-838v-wpv7" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9fpg-838v-wpv7", "reference_id": "GHSA-9fpg-838v-wpv7", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:30Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9fpg-838v-wpv7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35971", "GHSA-9fpg-838v-wpv7" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zc6k-2kds-afht" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205522?format=api", "vulnerability_id": "VCID-zd9x-yen4-pkdf", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41884", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32509", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41884" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/2b56169c16e375c521a3bc8ea658811cc0793784", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/2b56169c16e375c521a3bc8ea658811cc0793784" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41884", "reference_id": "CVE-2022-41884", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41884" }, { "reference_url": "https://github.com/advisories/GHSA-jq6x-99hj-q636", "reference_id": "GHSA-jq6x-99hj-q636", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-jq6x-99hj-q636" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jq6x-99hj-q636", "reference_id": "GHSA-jq6x-99hj-q636", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jq6x-99hj-q636" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41884", "GHSA-jq6x-99hj-q636" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zd9x-yen4-pkdf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201010?format=api", "vulnerability_id": "VCID-ztrz-qnwj-2fhd", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35988", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22405", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35988" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/c55b476aa0e0bd4ee99d0f3ad18d9d706cd1260a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:11Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/c55b476aa0e0bd4ee99d0f3ad18d9d706cd1260a" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35988", "reference_id": "CVE-2022-35988", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35988" }, { "reference_url": "https://github.com/advisories/GHSA-9vqj-64pv-w55c", "reference_id": "GHSA-9vqj-64pv-w55c", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9vqj-64pv-w55c" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9vqj-64pv-w55c", "reference_id": "GHSA-9vqj-64pv-w55c", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:59:11Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9vqj-64pv-w55c" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35988", "GHSA-9vqj-64pv-w55c" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ztrz-qnwj-2fhd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/205547?format=api", "vulnerability_id": "VCID-zts1-n99c-cuh1", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41911", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00158", "scoring_system": "epss", "scoring_elements": "0.36447", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-41911" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/blob/807cae8a807960fd7ac2313cde73a11fc15e7942/tensorflow/core/framework/tensor.cc#L1200-L1227", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:54:15Z/" } ], "url": "https://github.com/tensorflow/tensorflow/blob/807cae8a807960fd7ac2313cde73a11fc15e7942/tensorflow/core/framework/tensor.cc#L1200-L1227" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/1be743703279782a357adbf9b77dcb994fe8b508", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:54:15Z/" } ], "url": "https://github.com/tensorflow/tensorflow/commit/1be743703279782a357adbf9b77dcb994fe8b508" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41911", "reference_id": "CVE-2022-41911", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41911" }, { "reference_url": "https://github.com/advisories/GHSA-pf36-r9c6-h97j", "reference_id": "GHSA-pf36-r9c6-h97j", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-pf36-r9c6-h97j" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pf36-r9c6-h97j", "reference_id": "GHSA-pf36-r9c6-h97j", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:54:15Z/" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pf36-r9c6-h97j" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80024?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/80023?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/80017?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.10.1" } ], "aliases": [ "CVE-2022-41911", "GHSA-pf36-r9c6-h97j" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zts1-n99c-cuh1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/201015?format=api", "vulnerability_id": "VCID-zun3-rnh3-h3e7", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35993", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00064", "scoring_system": "epss", "scoring_elements": "0.20156", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-35993" }, { "reference_url": "https://github.com/tensorflow/tensorflow", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow" }, { "reference_url": "https://github.com/tensorflow/tensorflow/commit/cf70b79d2662c0d3c6af74583641e345fc939467", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/commit/cf70b79d2662c0d3c6af74583641e345fc939467" }, { "reference_url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35993", "reference_id": "CVE-2022-35993", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35993" }, { "reference_url": "https://github.com/advisories/GHSA-wq6q-6m32-9rv9", "reference_id": "GHSA-wq6q-6m32-9rv9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-wq6q-6m32-9rv9" }, { "reference_url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wq6q-6m32-9rv9", "reference_id": "GHSA-wq6q-6m32-9rv9", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wq6q-6m32-9rv9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/25377?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-ffkg-sa3q-8qfq" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-ux3x-2756-n3av" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-uyv6-cmed-a7c3" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/77932?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/79195?format=api", "purl": "pkg:pypi/tensorflow-gpu@2.9.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1vxc-sbk4-77ef" }, { "vulnerability": "VCID-2vyy-ktxf-y7hj" }, { "vulnerability": "VCID-3erq-zcrk-qqaf" }, { "vulnerability": "VCID-3esk-gwz9-wfa4" }, { "vulnerability": "VCID-3s87-vf5k-cycp" }, { "vulnerability": "VCID-3yjn-h25c-v3gb" }, { "vulnerability": "VCID-3zd4-d2hc-87at" }, { "vulnerability": "VCID-5f52-bwtt-m3hn" }, { "vulnerability": "VCID-5m3b-x2b2-nfer" }, { "vulnerability": "VCID-5qwh-rm2h-ekc7" }, { "vulnerability": "VCID-6apy-b5ev-hkcj" }, { "vulnerability": "VCID-6cr3-ywr5-f7e6" }, { "vulnerability": "VCID-6nyr-2edx-5qg6" }, { "vulnerability": "VCID-77cw-2wuq-nued" }, { "vulnerability": "VCID-7guk-jpt3-eka8" }, { "vulnerability": "VCID-8dhx-4a17-rbcj" }, { "vulnerability": "VCID-9686-ufak-6ufd" }, { "vulnerability": "VCID-ayew-3cca-tyhz" }, { "vulnerability": "VCID-bby1-jzms-6fgm" }, { "vulnerability": "VCID-d6hn-ppha-buc1" }, { "vulnerability": "VCID-dbu5-btf9-2bee" }, { "vulnerability": "VCID-dgbb-1rft-7kdr" }, { "vulnerability": "VCID-djkj-bbaq-6kdr" }, { "vulnerability": "VCID-dk2p-s22p-hbd8" }, { "vulnerability": "VCID-dx1v-hfa1-xfg6" }, { "vulnerability": "VCID-f58d-1zga-jkf2" }, { "vulnerability": "VCID-gpta-cf34-vkfe" }, { "vulnerability": "VCID-hdyy-j28t-wyc1" }, { "vulnerability": "VCID-rzxq-vcmu-m7h5" }, { "vulnerability": "VCID-s8hv-3hsb-mfca" }, { "vulnerability": "VCID-svbx-mnnb-eqbg" }, { "vulnerability": "VCID-sxk5-athp-f7f1" }, { "vulnerability": "VCID-u133-f98p-zqec" }, { "vulnerability": "VCID-uwq2-a5hb-9fhd" }, { "vulnerability": "VCID-uxg4-9qfy-tbg6" }, { "vulnerability": "VCID-vbq8-42vx-b3hz" }, { "vulnerability": "VCID-xp3m-ntp9-6bf4" }, { "vulnerability": "VCID-yvdh-xkxd-uyb2" }, { "vulnerability": "VCID-zd9x-yen4-pkdf" }, { "vulnerability": "VCID-zts1-n99c-cuh1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.9.1" } ], "aliases": [ "CVE-2022-35993", "GHSA-wq6q-6m32-9rv9" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zun3-rnh3-h3e7" } ], "fixing_vulnerabilities": [], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0rc0" }