{"url":"http://public2.vulnerablecode.io/api/packages/24853?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.0","type":"pypi","namespace":"","name":"tensorflow-gpu","version":"2.5.0","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"2.8.0","latest_non_vulnerable_version":"2.8.0","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3669?format=json","vulnerability_id":"VCID-1966-8tnk-77gv","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-596.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-596.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-794.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-794.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-305.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-305.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/div.cc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/div.cc"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/1e206baedf8bef0334cca3eb92bab134ef525a28","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/1e206baedf8bef0334cca3eb92bab134ef525a28"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rhrq-64mq-hf9h","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rhrq-64mq-hf9h"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37683","reference_id":"CVE-2021-37683","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37683"},{"reference_url":"https://github.com/advisories/GHSA-rhrq-64mq-hf9h","reference_id":"GHSA-rhrq-64mq-hf9h","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-rhrq-64mq-hf9h"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37683","GHSA-rhrq-64mq-hf9h","PYSEC-2021-305","PYSEC-2021-596","PYSEC-2021-794"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1966-8tnk-77gv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3700?format=json","vulnerability_id":"VCID-1d58-76k6-gqhe","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-565.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-565.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-763.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-763.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-274.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-274.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/5ecec9c6fbdbc6be03295685190a45e7eee726ab","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/5ecec9c6fbdbc6be03295685190a45e7eee726ab"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m7fm-4jfh-jrg6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m7fm-4jfh-jrg6"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37652","reference_id":"CVE-2021-37652","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37652"},{"reference_url":"https://github.com/advisories/GHSA-m7fm-4jfh-jrg6","reference_id":"GHSA-m7fm-4jfh-jrg6","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-m7fm-4jfh-jrg6"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37652","GHSA-m7fm-4jfh-jrg6","PYSEC-2021-274","PYSEC-2021-565","PYSEC-2021-763"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1d58-76k6-gqhe"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36029?format=json","vulnerability_id":"VCID-217a-71wn-nybg","summary":"Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorFlow can fail to specialize a type during shape inference. This case is covered by the `DCHECK` function however, `DCHECK` is a no-op in production builds and an assertion failure in debug builds. In the first case execution proceeds to the `ValueOrDie` line. This results in an assertion failure as `ret` contains an error `Status`, not a value. In the second case we also get a crash due to the assertion failure. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-81.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-81.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-136.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-136.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.cc#L168-L174","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.cc#L168-L174"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/cb164786dc891ea11d3a900e90367c339305dc7b","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/cb164786dc891ea11d3a900e90367c339305dc7b"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rww7-2gpw-fv6j","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rww7-2gpw-fv6j"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23572","reference_id":"CVE-2022-23572","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23572"},{"reference_url":"https://github.com/advisories/GHSA-rww7-2gpw-fv6j","reference_id":"GHSA-rww7-2gpw-fv6j","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-rww7-2gpw-fv6j"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23572","GHSA-rww7-2gpw-fv6j","PYSEC-2022-136","PYSEC-2022-81"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-217a-71wn-nybg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36002?format=json","vulnerability_id":"VCID-2hj4-bbfq-xqfj","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateTensorSize` is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-84.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-84.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-139.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-139.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L1552-L1558","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L1552-L1558"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/fcd18ce3101f245b083b30655c27b239dc72221e","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/fcd18ce3101f245b083b30655c27b239dc72221e"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c94w-c95p-phf8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c94w-c95p-phf8"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23575","reference_id":"CVE-2022-23575","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23575"},{"reference_url":"https://github.com/advisories/GHSA-c94w-c95p-phf8","reference_id":"GHSA-c94w-c95p-phf8","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-c94w-c95p-phf8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23575","GHSA-c94w-c95p-phf8","PYSEC-2022-139","PYSEC-2022-84"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2hj4-bbfq-xqfj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3711?format=json","vulnerability_id":"VCID-2k1k-p7zh-guew","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-554.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-554.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-752.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-752.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-263.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-263.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/a2b743f6017d7b97af1fe49087ae15f0ac634373","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/a2b743f6017d7b97af1fe49087ae15f0ac634373"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c8h-vvrj-w2p8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c8h-vvrj-w2p8"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37641","reference_id":"CVE-2021-37641","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37641"},{"reference_url":"https://github.com/advisories/GHSA-9c8h-vvrj-w2p8","reference_id":"GHSA-9c8h-vvrj-w2p8","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-9c8h-vvrj-w2p8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37641","GHSA-9c8h-vvrj-w2p8","PYSEC-2021-263","PYSEC-2021-554","PYSEC-2021-752"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2k1k-p7zh-guew"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3702?format=json","vulnerability_id":"VCID-2pkc-gdjx-7bcf","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-563.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-563.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-761.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-761.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-272.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-272.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e0b6e58c328059829c3eb968136f17aa72b6c876","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e0b6e58c328059829c3eb968136f17aa72b6c876"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f8h4-7rgh-q2gm","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f8h4-7rgh-q2gm"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37650","reference_id":"CVE-2021-37650","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37650"},{"reference_url":"https://github.com/advisories/GHSA-f8h4-7rgh-q2gm","reference_id":"GHSA-f8h4-7rgh-q2gm","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-f8h4-7rgh-q2gm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37650","GHSA-f8h4-7rgh-q2gm","PYSEC-2021-272","PYSEC-2021-563","PYSEC-2021-761"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2pkc-gdjx-7bcf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36004?format=json","vulnerability_id":"VCID-2sak-438s-bbg8","summary":"Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a heap OOB write in `Grappler`. The `set_output` function writes to an array at the specified index. Hence, this gives a malicious user a write primitive. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-75.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-75.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-130.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-130.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.h#L394","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.h#L394"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/graph_properties.cc#L1132-L1141","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/graph_properties.cc#L1132-L1141"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/97282c6d0d34476b6ba033f961590b783fa184cd","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/97282c6d0d34476b6ba033f961590b783fa184cd"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5qw5-89mw-wcg2","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5qw5-89mw-wcg2"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23566","reference_id":"CVE-2022-23566","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23566"},{"reference_url":"https://github.com/advisories/GHSA-5qw5-89mw-wcg2","reference_id":"GHSA-5qw5-89mw-wcg2","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-5qw5-89mw-wcg2"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23566","GHSA-5qw5-89mw-wcg2","PYSEC-2022-130","PYSEC-2022-75"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2sak-438s-bbg8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36033?format=json","vulnerability_id":"VCID-2t7w-zpd8-suc9","summary":"Tensorflow is an Open Source Machine Learning Framework. In multiple places, TensorFlow uses `tempfile.mktemp` to create temporary files. While this is acceptable in testing, in utilities and libraries it is dangerous as a different process can create the file between the check for the filename in `mktemp` and the actual creation of the file by a subsequent operation (a TOC/TOU type of weakness). In several instances, TensorFlow was supposed to actually create a temporary directory instead of a file. This logic bug is hidden away by the `mktemp` function usage. We have patched the issue in several commits, replacing `mktemp` with the safer `mkstemp`/`mkdtemp` functions, according to the usage pattern. Users are advised to upgrade as soon as possible.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-72.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-72.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-127.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-127.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wc4g-r73w-x8mm","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wc4g-r73w-x8mm"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23563","reference_id":"CVE-2022-23563","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23563"},{"reference_url":"https://github.com/advisories/GHSA-wc4g-r73w-x8mm","reference_id":"GHSA-wc4g-r73w-x8mm","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-wc4g-r73w-x8mm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23563","GHSA-wc4g-r73w-x8mm","PYSEC-2022-127","PYSEC-2022-72"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2t7w-zpd8-suc9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3680?format=json","vulnerability_id":"VCID-3e9u-gag2-e3bn","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-585.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-585.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-783.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-783.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-294.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-294.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/a4e138660270e7599793fa438cd7b2fc2ce215a6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/a4e138660270e7599793fa438cd7b2fc2ce215a6"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hj3-vjjf-f5m7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hj3-vjjf-f5m7"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37672","reference_id":"CVE-2021-37672","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37672"},{"reference_url":"https://github.com/advisories/GHSA-5hj3-vjjf-f5m7","reference_id":"GHSA-5hj3-vjjf-f5m7","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-5hj3-vjjf-f5m7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37672","GHSA-5hj3-vjjf-f5m7","PYSEC-2021-294","PYSEC-2021-585","PYSEC-2021-783"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3e9u-gag2-e3bn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35981?format=json","vulnerability_id":"VCID-3y5w-424q-8qcn","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `Dequantize` does not fully validate the value of `axis` and can result in heap OOB accesses. The `axis` argument can be `-1` (the default value for the optional argument) or any other positive value at most the number of dimensions of the input. Unfortunately, the upper bound is not checked and this results in reading past the end of the array containing the dimensions of the input tensor. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-50.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-50.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-105.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-105.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/dequantize_op.cc#L92-L153","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/dequantize_op.cc#L92-L153"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/23968a8bf65b009120c43b5ebcceaf52dbc9e943","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/23968a8bf65b009120c43b5ebcceaf52dbc9e943"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-23hm-7w47-xw72","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-23hm-7w47-xw72"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21726","reference_id":"CVE-2022-21726","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21726"},{"reference_url":"https://github.com/advisories/GHSA-23hm-7w47-xw72","reference_id":"GHSA-23hm-7w47-xw72","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-23hm-7w47-xw72"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21726","GHSA-23hm-7w47-xw72","PYSEC-2022-105","PYSEC-2022-50"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3y5w-424q-8qcn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3676?format=json","vulnerability_id":"VCID-4de1-psyn-7kej","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-589.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-589.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-787.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-787.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-298.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-298.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/578e634b4f1c1c684d4b4294f9e5281b2133b3ed","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/578e634b4f1c1c684d4b4294f9e5281b2133b3ed"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v768-w7m9-2vmm","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v768-w7m9-2vmm"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37676","reference_id":"CVE-2021-37676","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37676"},{"reference_url":"https://github.com/advisories/GHSA-v768-w7m9-2vmm","reference_id":"GHSA-v768-w7m9-2vmm","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-v768-w7m9-2vmm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37676","GHSA-v768-w7m9-2vmm","PYSEC-2021-298","PYSEC-2021-589","PYSEC-2021-787"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4de1-psyn-7kej"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36006?format=json","vulnerability_id":"VCID-4n1w-zfpr-dugh","summary":"Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `IsSimplifiableReshape` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-90.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-90.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-145.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-145.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L1687-L1742","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L1687-L1742"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/1fb27733f943295d874417630edd3b38b34ce082","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/1fb27733f943295d874417630edd3b38b34ce082"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/240655511cd3e701155f944a972db71b6c0b1bb6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/240655511cd3e701155f944a972db71b6c0b1bb6"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/ebc1a2ffe5a7573d905e99bd0ee3568ee07c12c1","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/ebc1a2ffe5a7573d905e99bd0ee3568ee07c12c1"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fq86-3f29-px2c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fq86-3f29-px2c"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23581","reference_id":"CVE-2022-23581","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23581"},{"reference_url":"https://github.com/advisories/GHSA-fq86-3f29-px2c","reference_id":"GHSA-fq86-3f29-px2c","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-fq86-3f29-px2c"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23581","GHSA-fq86-3f29-px2c","PYSEC-2022-145","PYSEC-2022-90"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4n1w-zfpr-dugh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36034?format=json","vulnerability_id":"VCID-56kw-66kj-1kb7","summary":"Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial of service via assertion failure by altering a `SavedModel` on disk such that `AttrDef`s of some operation are duplicated. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-74.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-74.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-129.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-129.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/c2b31ff2d3151acb230edc3f5b1832d2c713a9e0","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/c2b31ff2d3151acb230edc3f5b1832d2c713a9e0"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4v5p-v5h9-6xjx","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4v5p-v5h9-6xjx"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23565","reference_id":"CVE-2022-23565","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23565"},{"reference_url":"https://github.com/advisories/GHSA-4v5p-v5h9-6xjx","reference_id":"GHSA-4v5p-v5h9-6xjx","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-4v5p-v5h9-6xjx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23565","GHSA-4v5p-v5h9-6xjx","PYSEC-2022-129","PYSEC-2022-74"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-56kw-66kj-1kb7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5138?format=json","vulnerability_id":"VCID-5781-vzmv-rkg4","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-611.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-611.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-809.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-809.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-394.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-394.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/f09caa532b6e1ac8d2aa61b7832c78c5b79300c6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/f09caa532b6e1ac8d2aa61b7832c78c5b79300c6"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j86v-p27c-73fm","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j86v-p27c-73fm"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41201","reference_id":"CVE-2021-41201","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41201"},{"reference_url":"https://github.com/advisories/GHSA-j86v-p27c-73fm","reference_id":"GHSA-j86v-p27c-73fm","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-j86v-p27c-73fm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41201","GHSA-j86v-p27c-73fm","PYSEC-2021-394","PYSEC-2021-611","PYSEC-2021-809"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5781-vzmv-rkg4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5144?format=json","vulnerability_id":"VCID-5j3t-baqf-dbhs","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-844.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-844.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-846.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-846.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-842.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-842.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e9c81c1e1a9cd8dd31f4e83676cab61b60658429","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e9c81c1e1a9cd8dd31f4e83676cab61b60658429"},{"reference_url":"https://github.com/tensorflow/tensorflow/issues/46888","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/issues/46888"},{"reference_url":"https://github.com/tensorflow/tensorflow/pull/51733","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/pull/51733"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cq76-mxrc-vchh","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cq76-mxrc-vchh"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41195","reference_id":"CVE-2021-41195","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41195"},{"reference_url":"https://github.com/advisories/GHSA-cq76-mxrc-vchh","reference_id":"GHSA-cq76-mxrc-vchh","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-cq76-mxrc-vchh"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"}],"aliases":["CVE-2021-41195","GHSA-cq76-mxrc-vchh","PYSEC-2021-842","PYSEC-2021-844","PYSEC-2021-846"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5j3t-baqf-dbhs"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3697?format=json","vulnerability_id":"VCID-5ke1-vz5z-qubj","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-568.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-568.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-766.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-766.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-277.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-277.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/01cff3f986259d661103412a20745928c727326f","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/01cff3f986259d661103412a20745928c727326f"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7fvx-3jfc-2cpc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7fvx-3jfc-2cpc"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37655","reference_id":"CVE-2021-37655","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37655"},{"reference_url":"https://github.com/advisories/GHSA-7fvx-3jfc-2cpc","reference_id":"GHSA-7fvx-3jfc-2cpc","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-7fvx-3jfc-2cpc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37655","GHSA-7fvx-3jfc-2cpc","PYSEC-2021-277","PYSEC-2021-568","PYSEC-2021-766"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5ke1-vz5z-qubj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3685?format=json","vulnerability_id":"VCID-5m82-fmvp-4qd1","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-580.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-580.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-778.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-778.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-289.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-289.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/2e0ee46f1a47675152d3d865797a18358881d7a6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/2e0ee46f1a47675152d3d865797a18358881d7a6"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w74j-v8xh-3w5h","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w74j-v8xh-3w5h"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37667","reference_id":"CVE-2021-37667","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37667"},{"reference_url":"https://github.com/advisories/GHSA-w74j-v8xh-3w5h","reference_id":"GHSA-w74j-v8xh-3w5h","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-w74j-v8xh-3w5h"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37667","GHSA-w74j-v8xh-3w5h","PYSEC-2021-289","PYSEC-2021-580","PYSEC-2021-778"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5m82-fmvp-4qd1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36007?format=json","vulnerability_id":"VCID-65fu-yg2h-zycr","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `AssignOp` can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized (to minimize number of allocations), but does not check that the right hand side is also initialized. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-82.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-82.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-137.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-137.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/assign_op.h#L30-L143","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/assign_op.h#L30-L143"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/ef1d027be116f25e25bb94a60da491c2cf55bd0b","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/ef1d027be116f25e25bb94a60da491c2cf55bd0b"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q85f-69q7-55h2","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q85f-69q7-55h2"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23573","reference_id":"CVE-2022-23573","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23573"},{"reference_url":"https://github.com/advisories/GHSA-q85f-69q7-55h2","reference_id":"GHSA-q85f-69q7-55h2","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-q85f-69q7-55h2"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23573","GHSA-q85f-69q7-55h2","PYSEC-2022-137","PYSEC-2022-82"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-65fu-yg2h-zycr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3704?format=json","vulnerability_id":"VCID-67ks-3hd1-8fff","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-561.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-561.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-759.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-759.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-270.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-270.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/9728c60e136912a12d99ca56e106b7cce7af5986","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/9728c60e136912a12d99ca56e106b7cce7af5986"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wp77-4gmm-7cq8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wp77-4gmm-7cq8"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37648","reference_id":"CVE-2021-37648","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37648"},{"reference_url":"https://github.com/advisories/GHSA-wp77-4gmm-7cq8","reference_id":"GHSA-wp77-4gmm-7cq8","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-wp77-4gmm-7cq8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37648","GHSA-wp77-4gmm-7cq8","PYSEC-2021-270","PYSEC-2021-561","PYSEC-2021-759"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-67ks-3hd1-8fff"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5114?format=json","vulnerability_id":"VCID-68ym-s45d-8bhk","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-634.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-634.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-832.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-832.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-417.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-417.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/68867bf01239d9e1048f98cbad185bf4761bedd3","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/68867bf01239d9e1048f98cbad185bf4761bedd3"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7r94-xv9v-63jw","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7r94-xv9v-63jw"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41225","reference_id":"CVE-2021-41225","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41225"},{"reference_url":"https://github.com/advisories/GHSA-7r94-xv9v-63jw","reference_id":"GHSA-7r94-xv9v-63jw","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-7r94-xv9v-63jw"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41225","GHSA-7r94-xv9v-63jw","PYSEC-2021-417","PYSEC-2021-634","PYSEC-2021-832"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-68ym-s45d-8bhk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36025?format=json","vulnerability_id":"VCID-6bgf-h7cu-27ec","summary":"Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operations. Both `embedding_size` and `lookup_size` are products of values provided by the user. Hence, a malicious user could trigger overflows in the multiplication. In certain scenarios, this can then result in heap OOB read/write. Users are advised to upgrade to a patched version.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-68.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-68.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-123.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-123.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/kernels/embedding_lookup_sparse.cc#L179-L189","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/kernels/embedding_lookup_sparse.cc#L179-L189"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/1de49725a5fc4e48f1a3b902ec3599ee99283043","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/1de49725a5fc4e48f1a3b902ec3599ee99283043"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/a4e401da71458d253b05e41f28637b65baf64be4","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/a4e401da71458d253b05e41f28637b65baf64be4"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/f19be71717c497723ba0cea0379e84f061a75e01","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/f19be71717c497723ba0cea0379e84f061a75e01"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-98p5-x8x4-c9m5","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-98p5-x8x4-c9m5"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23559","reference_id":"CVE-2022-23559","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23559"},{"reference_url":"https://github.com/advisories/GHSA-98p5-x8x4-c9m5","reference_id":"GHSA-98p5-x8x4-c9m5","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-98p5-x8x4-c9m5"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23559","GHSA-98p5-x8x4-c9m5","PYSEC-2022-123","PYSEC-2022-68"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6bgf-h7cu-27ec"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3699?format=json","vulnerability_id":"VCID-6j49-ccph-uqht","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-566.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-566.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-764.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-764.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-275.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-275.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/ac117ee8a8ea57b73d34665cdf00ef3303bc0b11","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/ac117ee8a8ea57b73d34665cdf00ef3303bc0b11"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qjj8-32p7-h289","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qjj8-32p7-h289"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37653","reference_id":"CVE-2021-37653","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37653"},{"reference_url":"https://github.com/advisories/GHSA-qjj8-32p7-h289","reference_id":"GHSA-qjj8-32p7-h289","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-qjj8-32p7-h289"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37653","GHSA-qjj8-32p7-h289","PYSEC-2021-275","PYSEC-2021-566","PYSEC-2021-764"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6j49-ccph-uqht"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36022?format=json","vulnerability_id":"VCID-6jvw-p6me-mke6","summary":"Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `SafeToRemoveIdentity` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-88.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-88.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-143.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-143.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/dependency_optimizer.cc#L59-L98","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/dependency_optimizer.cc#L59-L98"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/92dba16749fae36c246bec3f9ba474d9ddeb7662","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/92dba16749fae36c246bec3f9ba474d9ddeb7662"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5f2r-qp73-37mr","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5f2r-qp73-37mr"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23579","reference_id":"CVE-2022-23579","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23579"},{"reference_url":"https://github.com/advisories/GHSA-5f2r-qp73-37mr","reference_id":"GHSA-5f2r-qp73-37mr","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-5f2r-qp73-37mr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23579","GHSA-5f2r-qp73-37mr","PYSEC-2022-143","PYSEC-2022-88"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6jvw-p6me-mke6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3696?format=json","vulnerability_id":"VCID-6nby-ppgb-e3f7","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-569.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-569.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-767.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-767.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-278.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-278.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/1071f554dbd09f7e101324d366eec5f4fe5a3ece","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/1071f554dbd09f7e101324d366eec5f4fe5a3ece"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4xfp-4pfp-89wg","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4xfp-4pfp-89wg"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37656","reference_id":"CVE-2021-37656","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37656"},{"reference_url":"https://github.com/advisories/GHSA-4xfp-4pfp-89wg","reference_id":"GHSA-4xfp-4pfp-89wg","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-4xfp-4pfp-89wg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37656","GHSA-4xfp-4pfp-89wg","PYSEC-2021-278","PYSEC-2021-569","PYSEC-2021-767"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6nby-ppgb-e3f7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36030?format=json","vulnerability_id":"VCID-6nfa-78eb-jffv","summary":"Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow can trigger a null pointer dereference. There are 2 places where this can occur, for the same malicious alteration of a `SavedModel` file (fixing the first one would trigger the same dereference in the second place). First, during constant folding, the `GraphDef` might not have the required nodes for the binary operation. If a node is missing, the correposning `mul_*child` would be null, and the dereference in the subsequent line would be incorrect. We have a similar issue during `IsIdentityConsumingSwitch`. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-98.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-98.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-153.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-153.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/mutable_graph_view.cc#L59-L74","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/mutable_graph_view.cc#L59-L74"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L3466-L3497","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L3466-L3497"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/045deec1cbdebb27d817008ad5df94d96a08b1bf","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/045deec1cbdebb27d817008ad5df94d96a08b1bf"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/0a365c029e437be0349c31f8d4c9926b69fa3fa1","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/0a365c029e437be0349c31f8d4c9926b69fa3fa1"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9px9-73fg-3fqp","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9px9-73fg-3fqp"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23589","reference_id":"CVE-2022-23589","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23589"},{"reference_url":"https://github.com/advisories/GHSA-9px9-73fg-3fqp","reference_id":"GHSA-9px9-73fg-3fqp","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-9px9-73fg-3fqp"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23589","GHSA-9px9-73fg-3fqp","PYSEC-2022-153","PYSEC-2022-98"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6nfa-78eb-jffv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35990?format=json","vulnerability_id":"VCID-6set-8e9p-nyeu","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalMaxPool` can be made to crash a TensorFlow process via a division by 0. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-59.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-59.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-114.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-114.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/fractional_max_pool_op.cc#L36-L192","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/fractional_max_pool_op.cc#L36-L192"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/ba4e8ac4dc2991e350d5cc407f8598c8d4ee70fb","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/ba4e8ac4dc2991e350d5cc407f8598c8d4ee70fb"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-87v6-crgm-2gfj","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-87v6-crgm-2gfj"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21735","reference_id":"CVE-2022-21735","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21735"},{"reference_url":"https://github.com/advisories/GHSA-87v6-crgm-2gfj","reference_id":"GHSA-87v6-crgm-2gfj","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-87v6-crgm-2gfj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21735","GHSA-87v6-crgm-2gfj","PYSEC-2022-114","PYSEC-2022-59"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6set-8e9p-nyeu"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5143?format=json","vulnerability_id":"VCID-6wh3-uhcu-jqef","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-606.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-606.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-804.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-804.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-389.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-389.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/12b1ff82b3f26ff8de17e58703231d5a02ef1b8b","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/12b1ff82b3f26ff8de17e58703231d5a02ef1b8b"},{"reference_url":"https://github.com/tensorflow/tensorflow/issues/51936","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/issues/51936"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m539-j985-hcr8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m539-j985-hcr8"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41196","reference_id":"CVE-2021-41196","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41196"},{"reference_url":"https://github.com/advisories/GHSA-m539-j985-hcr8","reference_id":"GHSA-m539-j985-hcr8","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-m539-j985-hcr8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41196","GHSA-m539-j985-hcr8","PYSEC-2021-389","PYSEC-2021-606","PYSEC-2021-804"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6wh3-uhcu-jqef"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36016?format=json","vulnerability_id":"VCID-6xhv-euz8-zkc8","summary":"Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a use after free behavior when decoding PNG images. After `png::CommonFreeDecode(&decode)` gets called, the values of `decode.width` and `decode.height` are in an unspecified state. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-93.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-93.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-148.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-148.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/image/decode_image_op.cc#L339-L346","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/image/decode_image_op.cc#L339-L346"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e746adbfcfee15e9cfdb391ff746c765b99bdf9b","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e746adbfcfee15e9cfdb391ff746c765b99bdf9b"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-24x4-6qmh-88qg","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-24x4-6qmh-88qg"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23584","reference_id":"CVE-2022-23584","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23584"},{"reference_url":"https://github.com/advisories/GHSA-24x4-6qmh-88qg","reference_id":"GHSA-24x4-6qmh-88qg","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-24x4-6qmh-88qg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23584","GHSA-24x4-6qmh-88qg","PYSEC-2022-148","PYSEC-2022-93"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6xhv-euz8-zkc8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5132?format=json","vulnerability_id":"VCID-6yd6-npyx-93cx","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-616.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-616.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-814.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-814.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-399.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-399.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/inplace_ops.cc#L72-L97","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/inplace_ops.cc#L72-L97"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/9de11bdc2cf1284b2f635419bd3e6bbc7643eb2c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/9de11bdc2cf1284b2f635419bd3e6bbc7643eb2c"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/d11f21bbdfa54f3576ae860fc927bf23c675ebc0","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/d11f21bbdfa54f3576ae860fc927bf23c675ebc0"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e67caccea81167402c62977b5c521f2a8b261d6a","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e67caccea81167402c62977b5c521f2a8b261d6a"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7v94-64hj-m82h","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7v94-64hj-m82h"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41207","reference_id":"CVE-2021-41207","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41207"},{"reference_url":"https://github.com/advisories/GHSA-7v94-64hj-m82h","reference_id":"GHSA-7v94-64hj-m82h","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-7v94-64hj-m82h"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41207","GHSA-7v94-64hj-m82h","PYSEC-2021-399","PYSEC-2021-616","PYSEC-2021-814"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6yd6-npyx-93cx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36031?format=json","vulnerability_id":"VCID-76t8-h98v-buhf","summary":"Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments, if the tensors have an invalid `dtype` and 0 elements or an invalid shape. This allows attackers to cause denial of services in TensorFlow processes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-80.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-80.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-135.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-135.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/5b491cd5e41ad63735161cec9c2a568172c8b6a3","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/5b491cd5e41ad63735161cec9c2a568172c8b6a3"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j3mj-fhpq-qqjj","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j3mj-fhpq-qqjj"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23571","reference_id":"CVE-2022-23571","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23571"},{"reference_url":"https://github.com/advisories/GHSA-j3mj-fhpq-qqjj","reference_id":"GHSA-j3mj-fhpq-qqjj","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-j3mj-fhpq-qqjj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23571","GHSA-j3mj-fhpq-qqjj","PYSEC-2022-135","PYSEC-2022-80"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-76t8-h98v-buhf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3705?format=json","vulnerability_id":"VCID-77ap-cbge-vfam","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-560.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-560.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-758.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-758.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-269.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-269.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/02cc160e29d20631de3859c6653184e3f876b9d7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/02cc160e29d20631de3859c6653184e3f876b9d7"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c5x2-p679-95wc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c5x2-p679-95wc"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37647","reference_id":"CVE-2021-37647","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37647"},{"reference_url":"https://github.com/advisories/GHSA-c5x2-p679-95wc","reference_id":"GHSA-c5x2-p679-95wc","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-c5x2-p679-95wc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37647","GHSA-c5x2-p679-95wc","PYSEC-2021-269","PYSEC-2021-560","PYSEC-2021-758"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-77ap-cbge-vfam"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3712?format=json","vulnerability_id":"VCID-799s-fus4-nygx","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-553.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-553.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-751.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-751.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-262.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-262.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/4923de56ec94fff7770df259ab7f2288a74feb41","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/4923de56ec94fff7770df259ab7f2288a74feb41"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-95xm-g58g-3p88","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-95xm-g58g-3p88"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37640","reference_id":"CVE-2021-37640","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37640"},{"reference_url":"https://github.com/advisories/GHSA-95xm-g58g-3p88","reference_id":"GHSA-95xm-g58g-3p88","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-95xm-g58g-3p88"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37640","GHSA-95xm-g58g-3p88","PYSEC-2021-262","PYSEC-2021-553","PYSEC-2021-751"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-799s-fus4-nygx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5124?format=json","vulnerability_id":"VCID-7avd-xuag-ybbv","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-624.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-624.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-822.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-822.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-407.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-407.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/d3738dd70f1c9ceb547258cbb82d853da8771850","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/d3738dd70f1c9ceb547258cbb82d853da8771850"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x3v8-c8qx-3j3r","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x3v8-c8qx-3j3r"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41215","reference_id":"CVE-2021-41215","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41215"},{"reference_url":"https://github.com/advisories/GHSA-x3v8-c8qx-3j3r","reference_id":"GHSA-x3v8-c8qx-3j3r","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-x3v8-c8qx-3j3r"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41215","GHSA-x3v8-c8qx-3j3r","PYSEC-2021-407","PYSEC-2021-624","PYSEC-2021-822"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7avd-xuag-ybbv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5129?format=json","vulnerability_id":"VCID-7gat-e8qw-e7hd","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-619.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-619.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-817.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-817.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-402.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-402.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/701cfaca222a82afbeeb17496bd718baa65a67d2","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/701cfaca222a82afbeeb17496bd718baa65a67d2"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m342-ff57-4jcc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m342-ff57-4jcc"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41210","reference_id":"CVE-2021-41210","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41210"},{"reference_url":"https://github.com/advisories/GHSA-m342-ff57-4jcc","reference_id":"GHSA-m342-ff57-4jcc","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-m342-ff57-4jcc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41210","GHSA-m342-ff57-4jcc","PYSEC-2021-402","PYSEC-2021-619","PYSEC-2021-817"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7gat-e8qw-e7hd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35987?format=json","vulnerability_id":"VCID-7jup-pyyw-c3eg","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementations of `Sparse*Cwise*` ops are vulnerable to integer overflows. These can be used to trigger large allocations (so, OOM based denial of service) or `CHECK`-fails when building new `TensorShape` objects (so, assert failures based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large `TensorShape` with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-76.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-76.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-131.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-131.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_dense_binary_op_shared.cc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_dense_binary_op_shared.cc"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/1b54cadd19391b60b6fcccd8d076426f7221d5e8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/1b54cadd19391b60b6fcccd8d076426f7221d5e8"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e952a89b7026b98fe8cbe626514a93ed68b7c510","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e952a89b7026b98fe8cbe626514a93ed68b7c510"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rrx2-r989-2c43","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rrx2-r989-2c43"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23567","reference_id":"CVE-2022-23567","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23567"},{"reference_url":"https://github.com/advisories/GHSA-rrx2-r989-2c43","reference_id":"GHSA-rrx2-r989-2c43","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-rrx2-r989-2c43"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23567","GHSA-rrx2-r989-2c43","PYSEC-2022-131","PYSEC-2022-76"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7jup-pyyw-c3eg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36023?format=json","vulnerability_id":"VCID-7rgb-m55r-4yhr","summary":"Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-96.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-96.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-151.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-151.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L2621-L2689","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L2621-L2689"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/0aaaae6eca5a7175a193696383f582f53adab23f","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/0aaaae6eca5a7175a193696383f582f53adab23f"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8jj7-5vxc-pg2q","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8jj7-5vxc-pg2q"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23587","reference_id":"CVE-2022-23587","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23587"},{"reference_url":"https://github.com/advisories/GHSA-8jj7-5vxc-pg2q","reference_id":"GHSA-8jj7-5vxc-pg2q","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-8jj7-5vxc-pg2q"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23587","GHSA-8jj7-5vxc-pg2q","PYSEC-2022-151","PYSEC-2022-96"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7rgb-m55r-4yhr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36019?format=json","vulnerability_id":"VCID-7z58-8eek-3fg2","summary":"Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would allow limited reads and writes outside of arrays in TFLite. This exploits missing validation in the conversion from sparse tensors to dense tensors. The fix is included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. Users are advised to upgrade as soon as possible.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-69.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-69.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-124.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-124.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/kernels/internal/utils/sparsity_format_converter.cc#L252-L293","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/kernels/internal/utils/sparsity_format_converter.cc#L252-L293"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/6364463d6f5b6254cac3d6aedf999b6a96225038","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/6364463d6f5b6254cac3d6aedf999b6a96225038"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4hvf-hxvg-f67v","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4hvf-hxvg-f67v"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23560","reference_id":"CVE-2022-23560","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23560"},{"reference_url":"https://github.com/advisories/GHSA-4hvf-hxvg-f67v","reference_id":"GHSA-4hvf-hxvg-f67v","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-4hvf-hxvg-f67v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23560","GHSA-4hvf-hxvg-f67v","PYSEC-2022-124","PYSEC-2022-69"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7z58-8eek-3fg2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5125?format=json","vulnerability_id":"VCID-85jp-mtkt-6kb1","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-623.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-623.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-821.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-821.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-406.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-406.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vwhq-49r4-gj9v","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vwhq-49r4-gj9v"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41214","reference_id":"CVE-2021-41214","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41214"},{"reference_url":"https://github.com/advisories/GHSA-vwhq-49r4-gj9v","reference_id":"GHSA-vwhq-49r4-gj9v","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-vwhq-49r4-gj9v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41214","GHSA-vwhq-49r4-gj9v","PYSEC-2021-406","PYSEC-2021-623","PYSEC-2021-821"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-85jp-mtkt-6kb1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35994?format=json","vulnerability_id":"VCID-87r3-u8t5-m7d2","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `UnravelIndex` is vulnerable to a division by zero caused by an integer overflow bug. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-53.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-53.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-108.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-108.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/unravel_index_op.cc#L36-L135","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/unravel_index_op.cc#L36-L135"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/58b34c6c8250983948b5a781b426f6aa01fd47af","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/58b34c6c8250983948b5a781b426f6aa01fd47af"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-34f9-hjfq-rr8j","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-34f9-hjfq-rr8j"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21729","reference_id":"CVE-2022-21729","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21729"},{"reference_url":"https://github.com/advisories/GHSA-34f9-hjfq-rr8j","reference_id":"GHSA-34f9-hjfq-rr8j","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-34f9-hjfq-rr8j"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21729","GHSA-34f9-hjfq-rr8j","PYSEC-2022-108","PYSEC-2022-53"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-87r3-u8t5-m7d2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36027?format=json","vulnerability_id":"VCID-8b1b-hevb-cqht","summary":"Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that Grappler optimizer would attempt to build a tensor using a reference `dtype`. This would result in a crash due to a `CHECK`-fail in the `Tensor` constructor as reference types are not allowed. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-97.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-97.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-152.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-152.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/tensor.cc#L733-L781","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/tensor.cc#L733-L781"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L1328-L1402","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L1328-L1402"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/6b5adc0877de832b2a7c189532dbbbc64622eeb6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/6b5adc0877de832b2a7c189532dbbbc64622eeb6"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fx5c-h9f6-rv7c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fx5c-h9f6-rv7c"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23588","reference_id":"CVE-2022-23588","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23588"},{"reference_url":"https://github.com/advisories/GHSA-fx5c-h9f6-rv7c","reference_id":"GHSA-fx5c-h9f6-rv7c","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-fx5c-h9f6-rv7c"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23588","GHSA-fx5c-h9f6-rv7c","PYSEC-2022-152","PYSEC-2022-97"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8b1b-hevb-cqht"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5137?format=json","vulnerability_id":"VCID-8bz4-tb8u-ckdy","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-612.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-612.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-810.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-810.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-395.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-395.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/1b0e0ec27e7895b9985076eab32445026ae5ca94","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/1b0e0ec27e7895b9985076eab32445026ae5ca94"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/6d94002a09711d297dbba90390d5482b76113899","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/6d94002a09711d297dbba90390d5482b76113899"},{"reference_url":"https://github.com/tensorflow/tensorflow/issues/46889","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/issues/46889"},{"reference_url":"https://github.com/tensorflow/tensorflow/issues/46912","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/issues/46912"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xrqm-fpgr-6hhx","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xrqm-fpgr-6hhx"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41202","reference_id":"CVE-2021-41202","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41202"},{"reference_url":"https://github.com/advisories/GHSA-xrqm-fpgr-6hhx","reference_id":"GHSA-xrqm-fpgr-6hhx","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-xrqm-fpgr-6hhx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41202","GHSA-xrqm-fpgr-6hhx","PYSEC-2021-395","PYSEC-2021-612","PYSEC-2021-810"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8bz4-tb8u-ckdy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3668?format=json","vulnerability_id":"VCID-8zuz-d9cs-kudv","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-597.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-597.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-795.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-795.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-306.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-306.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q7f7-544h-67h9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q7f7-544h-67h9"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37684","reference_id":"CVE-2021-37684","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37684"},{"reference_url":"https://github.com/advisories/GHSA-q7f7-544h-67h9","reference_id":"GHSA-q7f7-544h-67h9","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-q7f7-544h-67h9"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37684","GHSA-q7f7-544h-67h9","PYSEC-2021-306","PYSEC-2021-597","PYSEC-2021-795"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8zuz-d9cs-kudv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3677?format=json","vulnerability_id":"VCID-9z61-fqek-cyfd","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-588.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-588.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-786.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-786.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-297.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-297.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/8a793b5d7f59e37ac7f3cd0954a750a2fe76bad4","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/8a793b5d7f59e37ac7f3cd0954a750a2fe76bad4"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c8h-2mv3-49ww","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c8h-2mv3-49ww"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37675","reference_id":"CVE-2021-37675","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37675"},{"reference_url":"https://github.com/advisories/GHSA-9c8h-2mv3-49ww","reference_id":"GHSA-9c8h-2mv3-49ww","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-9c8h-2mv3-49ww"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37675","GHSA-9c8h-2mv3-49ww","PYSEC-2021-297","PYSEC-2021-588","PYSEC-2021-786"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9z61-fqek-cyfd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35985?format=json","vulnerability_id":"VCID-af9s-d9qq-tuh7","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `AddManySparseToTensorsMap` is vulnerable to an integer overflow which results in a `CHECK`-fail when building new `TensorShape` objects (so, an assert failure based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large `TensorShape` with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-77.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-77.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-132.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-132.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_tensors_map_ops.cc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_tensors_map_ops.cc"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/a68f68061e263a88321c104a6c911fe5598050a8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/a68f68061e263a88321c104a6c911fe5598050a8"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/b51b82fe65ebace4475e3c54eb089c18a4403f1c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/b51b82fe65ebace4475e3c54eb089c18a4403f1c"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6445-fm66-fvq2","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6445-fm66-fvq2"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23568","reference_id":"CVE-2022-23568","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23568"},{"reference_url":"https://github.com/advisories/GHSA-6445-fm66-fvq2","reference_id":"GHSA-6445-fm66-fvq2","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-6445-fm66-fvq2"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23568","GHSA-6445-fm66-fvq2","PYSEC-2022-132","PYSEC-2022-77"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-af9s-d9qq-tuh7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5113?format=json","vulnerability_id":"VCID-at48-mrdj-a3en","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-635.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-635.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-833.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-833.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-418.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-418.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/f410212e373eb2aec4c9e60bf3702eba99a38aba","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/f410212e373eb2aec4c9e60bf3702eba99a38aba"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-374m-jm66-3vj8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-374m-jm66-3vj8"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41226","reference_id":"CVE-2021-41226","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41226"},{"reference_url":"https://github.com/advisories/GHSA-374m-jm66-3vj8","reference_id":"GHSA-374m-jm66-3vj8","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-374m-jm66-3vj8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41226","GHSA-374m-jm66-3vj8","PYSEC-2021-418","PYSEC-2021-635","PYSEC-2021-833"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-at48-mrdj-a3en"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5116?format=json","vulnerability_id":"VCID-au3q-9qpz-pkgy","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-632.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-632.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-830.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-830.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-415.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-415.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/aab9998916c2ffbd8f0592059fad352622f89cda","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/aab9998916c2ffbd8f0592059fad352622f89cda"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f54p-f6jp-4rhr","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f54p-f6jp-4rhr"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41223","reference_id":"CVE-2021-41223","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41223"},{"reference_url":"https://github.com/advisories/GHSA-f54p-f6jp-4rhr","reference_id":"GHSA-f54p-f6jp-4rhr","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-f54p-f6jp-4rhr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41223","GHSA-f54p-f6jp-4rhr","PYSEC-2021-415","PYSEC-2021-632","PYSEC-2021-830"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-au3q-9qpz-pkgy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3690?format=json","vulnerability_id":"VCID-awrv-vnbj-3kg6","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-575.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-575.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-773.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-773.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-284.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-284.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/429f009d2b2c09028647dd4bb7b3f6f414bbaad7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/429f009d2b2c09028647dd4bb7b3f6f414bbaad7"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/9c87c32c710d0b5b53dc6fd3bfde4046e1f7a5ad","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/9c87c32c710d0b5b53dc6fd3bfde4046e1f7a5ad"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f5cx-5wr3-5qrc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f5cx-5wr3-5qrc"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37662","reference_id":"CVE-2021-37662","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37662"},{"reference_url":"https://github.com/advisories/GHSA-f5cx-5wr3-5qrc","reference_id":"GHSA-f5cx-5wr3-5qrc","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-f5cx-5wr3-5qrc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37662","GHSA-f5cx-5wr3-5qrc","PYSEC-2021-284","PYSEC-2021-575","PYSEC-2021-773"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-awrv-vnbj-3kg6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3681?format=json","vulnerability_id":"VCID-b23t-3kmy-ubea","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-584.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-584.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-782.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-782.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-293.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-293.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/532f5c5a547126c634fefd43bbad1dc6417678ac","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/532f5c5a547126c634fefd43bbad1dc6417678ac"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qr82-2c78-4m8h","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qr82-2c78-4m8h"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37671","reference_id":"CVE-2021-37671","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37671"},{"reference_url":"https://github.com/advisories/GHSA-qr82-2c78-4m8h","reference_id":"GHSA-qr82-2c78-4m8h","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-qr82-2c78-4m8h"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37671","GHSA-qr82-2c78-4m8h","PYSEC-2021-293","PYSEC-2021-584","PYSEC-2021-782"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-b23t-3kmy-ubea"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5130?format=json","vulnerability_id":"VCID-bgt5-979r-auc5","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-618.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-618.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-816.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-816.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-401.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-401.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hpv-v2rx-c5g6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hpv-v2rx-c5g6"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41209","reference_id":"CVE-2021-41209","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41209"},{"reference_url":"https://github.com/advisories/GHSA-6hpv-v2rx-c5g6","reference_id":"GHSA-6hpv-v2rx-c5g6","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-6hpv-v2rx-c5g6"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41209","GHSA-6hpv-v2rx-c5g6","PYSEC-2021-401","PYSEC-2021-618","PYSEC-2021-816"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bgt5-979r-auc5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5118?format=json","vulnerability_id":"VCID-bh5b-u3zt-puf9","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-630.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-630.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-828.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-828.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-413.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-413.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/af5fcebb37c8b5d71c237f4e59c6477015c78ce6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/af5fcebb37c8b5d71c237f4e59c6477015c78ce6"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cqv6-3phm-hcwx","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cqv6-3phm-hcwx"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41221","reference_id":"CVE-2021-41221","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41221"},{"reference_url":"https://github.com/advisories/GHSA-cqv6-3phm-hcwx","reference_id":"GHSA-cqv6-3phm-hcwx","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-cqv6-3phm-hcwx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41221","GHSA-cqv6-3phm-hcwx","PYSEC-2021-413","PYSEC-2021-630","PYSEC-2021-828"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bh5b-u3zt-puf9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35998?format=json","vulnerability_id":"VCID-bmvq-fjkr-2fc3","summary":"Tensorflow is an Open Source Machine Learning Framework. ### Impact An attacker can craft a TFLite model that would trigger a division by zero in the implementation of depthwise convolutions. The parameters of the convolution can be user controlled and are also used within a division operation to determine the size of the padding that needs to be added before applying the convolution. There is no check before this division that the divisor is strictly positive. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-65.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-65.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-120.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-120.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/lite/kernels/depthwise_conv.cc#L96","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/lite/kernels/depthwise_conv.cc#L96"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e5b0eec199c2d03de54fd6a7fd9275692218e2bc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e5b0eec199c2d03de54fd6a7fd9275692218e2bc"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-428x-9xc2-m8mj","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-428x-9xc2-m8mj"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21741","reference_id":"CVE-2022-21741","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21741"},{"reference_url":"https://github.com/advisories/GHSA-428x-9xc2-m8mj","reference_id":"GHSA-428x-9xc2-m8mj","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-428x-9xc2-m8mj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21741","GHSA-428x-9xc2-m8mj","PYSEC-2022-120","PYSEC-2022-65"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bmvq-fjkr-2fc3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3716?format=json","vulnerability_id":"VCID-bnhj-ujmq-mqad","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-549.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-549.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-747.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-747.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-258.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-258.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/d9204be9f49520cdaaeb2541d1dc5187b23f31d9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/d9204be9f49520cdaaeb2541d1dc5187b23f31d9"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hp4c-x6r7-6555","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hp4c-x6r7-6555"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37636","reference_id":"CVE-2021-37636","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37636"},{"reference_url":"https://github.com/advisories/GHSA-hp4c-x6r7-6555","reference_id":"GHSA-hp4c-x6r7-6555","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-hp4c-x6r7-6555"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37636","GHSA-hp4c-x6r7-6555","PYSEC-2021-258","PYSEC-2021-549","PYSEC-2021-747"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bnhj-ujmq-mqad"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36010?format=json","vulnerability_id":"VCID-bvuf-q5tx-x3ec","summary":"Tensorflow is an Open Source Machine Learning Framework. If a graph node is invalid, TensorFlow can leak memory in the implementation of `ImmutableExecutorState::Initialize`. Here, we set `item->kernel` to `nullptr` but it is a simple `OpKernel*` pointer so the memory that was previously allocated to it would leak. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-87.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-87.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-142.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-142.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/common_runtime/immutable_executor_state.cc#L84-L262","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/common_runtime/immutable_executor_state.cc#L84-L262"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/c79ccba517dbb1a0ccb9b01ee3bd2a63748b60dd","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/c79ccba517dbb1a0ccb9b01ee3bd2a63748b60dd"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8r7c-3cm2-3h8f","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8r7c-3cm2-3h8f"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23578","reference_id":"CVE-2022-23578","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23578"},{"reference_url":"https://github.com/advisories/GHSA-8r7c-3cm2-3h8f","reference_id":"GHSA-8r7c-3cm2-3h8f","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-8r7c-3cm2-3h8f"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23578","GHSA-8r7c-3cm2-3h8f","PYSEC-2022-142","PYSEC-2022-87"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bvuf-q5tx-x3ec"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3667?format=json","vulnerability_id":"VCID-c3wv-ty85-nqhc","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-598.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-598.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-796.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-796.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-307.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-307.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/expand_dims.cc#L36-L50","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/expand_dims.cc#L36-L50"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/d94ffe08a65400f898241c0374e9edc6fa8ed257","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/d94ffe08a65400f898241c0374e9edc6fa8ed257"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c545-c4f9-rf6v","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c545-c4f9-rf6v"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37685","reference_id":"CVE-2021-37685","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37685"},{"reference_url":"https://github.com/advisories/GHSA-c545-c4f9-rf6v","reference_id":"GHSA-c545-c4f9-rf6v","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-c545-c4f9-rf6v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37685","GHSA-c545-c4f9-rf6v","PYSEC-2021-307","PYSEC-2021-598","PYSEC-2021-796"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-c3wv-ty85-nqhc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3671?format=json","vulnerability_id":"VCID-c58x-wt2g-r7h4","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-594.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-594.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-792.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-792.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-303.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-303.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/svdf.cc#L300-L313","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/svdf.cc#L300-L313"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/5b048e87e4e55990dae6b547add4dae59f4e1c76","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/5b048e87e4e55990dae6b547add4dae59f4e1c76"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7xwj-5r4v-429p","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7xwj-5r4v-429p"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37681","reference_id":"CVE-2021-37681","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37681"},{"reference_url":"https://github.com/advisories/GHSA-7xwj-5r4v-429p","reference_id":"GHSA-7xwj-5r4v-429p","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-7xwj-5r4v-429p"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37681","GHSA-7xwj-5r4v-429p","PYSEC-2021-303","PYSEC-2021-594","PYSEC-2021-792"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-c58x-wt2g-r7h4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36020?format=json","vulnerability_id":"VCID-c5wa-uqe8-yqh1","summary":"Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive under certain conditions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-70.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-70.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-125.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-125.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/6c0b2b70eeee588591680f5b7d5d38175fd7cdf6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/6c0b2b70eeee588591680f5b7d5d38175fd7cdf6"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c78-vcq7-7vxq","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9c78-vcq7-7vxq"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23561","reference_id":"CVE-2022-23561","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23561"},{"reference_url":"https://github.com/advisories/GHSA-9c78-vcq7-7vxq","reference_id":"GHSA-9c78-vcq7-7vxq","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-9c78-vcq7-7vxq"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23561","GHSA-9c78-vcq7-7vxq","PYSEC-2022-125","PYSEC-2022-70"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-c5wa-uqe8-yqh1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3710?format=json","vulnerability_id":"VCID-cbgv-kvzc-gffm","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-555.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-555.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-753.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-753.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-264.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-264.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/4aacb30888638da75023e6601149415b39763d76","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/4aacb30888638da75023e6601149415b39763d76"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-ch4f-829c-v5pw","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-ch4f-829c-v5pw"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37642","reference_id":"CVE-2021-37642","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37642"},{"reference_url":"https://github.com/advisories/GHSA-ch4f-829c-v5pw","reference_id":"GHSA-ch4f-829c-v5pw","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-ch4f-829c-v5pw"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37642","GHSA-ch4f-829c-v5pw","PYSEC-2021-264","PYSEC-2021-555","PYSEC-2021-753"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cbgv-kvzc-gffm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3707?format=json","vulnerability_id":"VCID-cejb-v628-1ffm","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-558.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-558.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-756.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-756.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-267.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-267.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/96f364a1ca3009f98980021c4b32be5fdcca33a1","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/96f364a1ca3009f98980021c4b32be5fdcca33a1"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9w2p-5mgw-p94c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9w2p-5mgw-p94c"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37645","reference_id":"CVE-2021-37645","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37645"},{"reference_url":"https://github.com/advisories/GHSA-9w2p-5mgw-p94c","reference_id":"GHSA-9w2p-5mgw-p94c","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-9w2p-5mgw-p94c"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37645","GHSA-9w2p-5mgw-p94c","PYSEC-2021-267","PYSEC-2021-558","PYSEC-2021-756"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cejb-v628-1ffm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3714?format=json","vulnerability_id":"VCID-cqub-cr1u-hfgq","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-551.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-551.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-749.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-749.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-260.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-260.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/301ae88b331d37a2a16159b65b255f4f9eb39314","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/301ae88b331d37a2a16159b65b255f4f9eb39314"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hwr7-8gxx-fj5p","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hwr7-8gxx-fj5p"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37638","reference_id":"CVE-2021-37638","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37638"},{"reference_url":"https://github.com/advisories/GHSA-hwr7-8gxx-fj5p","reference_id":"GHSA-hwr7-8gxx-fj5p","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-hwr7-8gxx-fj5p"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37638","GHSA-hwr7-8gxx-fj5p","PYSEC-2021-260","PYSEC-2021-551","PYSEC-2021-749"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cqub-cr1u-hfgq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5122?format=json","vulnerability_id":"VCID-cswq-zynn-h7ct","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-626.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-626.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-824.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-824.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-409.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-409.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/05cbebd3c6bb8f517a158b0155debb8df79017ff","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/05cbebd3c6bb8f517a158b0155debb8df79017ff"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5crj-c72x-m7gq","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5crj-c72x-m7gq"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41217","reference_id":"CVE-2021-41217","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41217"},{"reference_url":"https://github.com/advisories/GHSA-5crj-c72x-m7gq","reference_id":"GHSA-5crj-c72x-m7gq","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-5crj-c72x-m7gq"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41217","GHSA-5crj-c72x-m7gq","PYSEC-2021-409","PYSEC-2021-626","PYSEC-2021-824"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cswq-zynn-h7ct"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36012?format=json","vulnerability_id":"VCID-d3qq-2w3d-dqe8","summary":"Tensorflow is an Open Source Machine Learning Framework. During shape inference, TensorFlow can allocate a large vector based on a value from a tensor controlled by the user. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-89.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-89.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-144.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-144.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.cc#L788-L790","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.cc#L788-L790"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/1361fb7e29449629e1df94d44e0427ebec8c83c7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/1361fb7e29449629e1df94d44e0427ebec8c83c7"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-627q-g293-49q7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-627q-g293-49q7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23580","reference_id":"CVE-2022-23580","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23580"},{"reference_url":"https://github.com/advisories/GHSA-627q-g293-49q7","reference_id":"GHSA-627q-g293-49q7","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-627q-g293-49q7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23580","GHSA-627q-g293-49q7","PYSEC-2022-144","PYSEC-2022-89"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-d3qq-2w3d-dqe8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5141?format=json","vulnerability_id":"VCID-dcp4-adwb-efd7","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-608.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-608.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-806.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-806.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-391.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-391.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/9294094df6fea79271778eb7e7ae1bad8b5ef98f","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/9294094df6fea79271778eb7e7ae1bad8b5ef98f"},{"reference_url":"https://github.com/tensorflow/tensorflow/issues/46911","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/issues/46911"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2p25-55c9-h58q","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2p25-55c9-h58q"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41198","reference_id":"CVE-2021-41198","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41198"},{"reference_url":"https://github.com/advisories/GHSA-2p25-55c9-h58q","reference_id":"GHSA-2p25-55c9-h58q","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-2p25-55c9-h58q"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41198","GHSA-2p25-55c9-h58q","PYSEC-2021-391","PYSEC-2021-608","PYSEC-2021-806"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dcp4-adwb-efd7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3688?format=json","vulnerability_id":"VCID-dkne-cc8g-qqfb","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-577.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-577.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-775.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-775.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-286.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-286.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e84c975313e8e8e38bb2ea118196369c45c51378","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e84c975313e8e8e38bb2ea118196369c45c51378"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r4c4-5fpq-56wg","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r4c4-5fpq-56wg"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37664","reference_id":"CVE-2021-37664","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37664"},{"reference_url":"https://github.com/advisories/GHSA-r4c4-5fpq-56wg","reference_id":"GHSA-r4c4-5fpq-56wg","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-r4c4-5fpq-56wg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37664","GHSA-r4c4-5fpq-56wg","PYSEC-2021-286","PYSEC-2021-577","PYSEC-2021-775"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dkne-cc8g-qqfb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3706?format=json","vulnerability_id":"VCID-ep2z-xrdv-tyhh","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-559.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-559.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-757.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-757.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-268.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-268.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/c283e542a3f422420cfdb332414543b62fc4e4a5","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/c283e542a3f422420cfdb332414543b62fc4e4a5"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h6jh-7gv5-28vg","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h6jh-7gv5-28vg"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37646","reference_id":"CVE-2021-37646","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37646"},{"reference_url":"https://github.com/advisories/GHSA-h6jh-7gv5-28vg","reference_id":"GHSA-h6jh-7gv5-28vg","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-h6jh-7gv5-28vg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37646","GHSA-h6jh-7gv5-28vg","PYSEC-2021-268","PYSEC-2021-559","PYSEC-2021-757"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ep2z-xrdv-tyhh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3701?format=json","vulnerability_id":"VCID-ewrz-th6a-augc","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-564.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-564.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-762.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-762.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-273.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-273.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/0f931751fb20f565c4e94aa6df58d54a003cdb30","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/0f931751fb20f565c4e94aa6df58d54a003cdb30"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hpv4-7p9c-mvfr","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hpv4-7p9c-mvfr"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37651","reference_id":"CVE-2021-37651","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37651"},{"reference_url":"https://github.com/advisories/GHSA-hpv4-7p9c-mvfr","reference_id":"GHSA-hpv4-7p9c-mvfr","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-hpv4-7p9c-mvfr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37651","GHSA-hpv4-7p9c-mvfr","PYSEC-2021-273","PYSEC-2021-564","PYSEC-2021-762"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ewrz-th6a-augc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3672?format=json","vulnerability_id":"VCID-f8h7-zfxn-wbaj","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-593.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-593.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-791.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-791.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-302.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-302.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/fully_connected.cc#L226","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/fully_connected.cc#L226"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/718721986aa137691ee23f03638867151f74935f","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/718721986aa137691ee23f03638867151f74935f"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cfpj-3q4c-jhvr","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cfpj-3q4c-jhvr"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37680","reference_id":"CVE-2021-37680","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37680"},{"reference_url":"https://github.com/advisories/GHSA-cfpj-3q4c-jhvr","reference_id":"GHSA-cfpj-3q4c-jhvr","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-cfpj-3q4c-jhvr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37680","GHSA-cfpj-3q4c-jhvr","PYSEC-2021-302","PYSEC-2021-593","PYSEC-2021-791"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-f8h7-zfxn-wbaj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5112?format=json","vulnerability_id":"VCID-ffnh-y8v7-9yg7","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-636.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-636.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-834.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-834.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-419.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-419.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/1cb6bb6c2a6019417c9adaf9e6843ba75ee2580b","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/1cb6bb6c2a6019417c9adaf9e6843ba75ee2580b"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/3712a2d3455e6ccb924daa5724a3652a86f6b585","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/3712a2d3455e6ccb924daa5724a3652a86f6b585"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j8c8-67vp-6mx7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j8c8-67vp-6mx7"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41227","reference_id":"CVE-2021-41227","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41227"},{"reference_url":"https://github.com/advisories/GHSA-j8c8-67vp-6mx7","reference_id":"GHSA-j8c8-67vp-6mx7","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-j8c8-67vp-6mx7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41227","GHSA-j8c8-67vp-6mx7","PYSEC-2021-419","PYSEC-2021-636","PYSEC-2021-834"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ffnh-y8v7-9yg7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3698?format=json","vulnerability_id":"VCID-g3af-vhsj-sfbq","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-567.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-567.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-765.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-765.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-276.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-276.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/bc9c546ce7015c57c2f15c168b3d9201de679a1d","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/bc9c546ce7015c57c2f15c168b3d9201de679a1d"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2r8p-fg3c-wcj4","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2r8p-fg3c-wcj4"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37654","reference_id":"CVE-2021-37654","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37654"},{"reference_url":"https://github.com/advisories/GHSA-2r8p-fg3c-wcj4","reference_id":"GHSA-2r8p-fg3c-wcj4","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-2r8p-fg3c-wcj4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37654","GHSA-2r8p-fg3c-wcj4","PYSEC-2021-276","PYSEC-2021-567","PYSEC-2021-765"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-g3af-vhsj-sfbq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35993?format=json","vulnerability_id":"VCID-g3tv-ra2y-hqdn","summary":"Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can be made to execute a division by 0. The function fails to check that the stride argument is strictly positive. Hence, the fix is to add a check for the stride argument to ensure it is valid. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-49.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-49.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-104.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-104.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/ffa202a17ab7a4a10182b746d230ea66f021fe16/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L189-L198","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/ffa202a17ab7a4a10182b746d230ea66f021fe16/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L189-L198"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/3218043d6d3a019756607643cf65574fbfef5d7a","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/3218043d6d3a019756607643cf65574fbfef5d7a"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v3f7-j968-4h5f","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v3f7-j968-4h5f"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21725","reference_id":"CVE-2022-21725","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21725"},{"reference_url":"https://github.com/advisories/GHSA-v3f7-j968-4h5f","reference_id":"GHSA-v3f7-j968-4h5f","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-v3f7-j968-4h5f"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21725","GHSA-v3f7-j968-4h5f","PYSEC-2022-104","PYSEC-2022-49"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-g3tv-ra2y-hqdn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36028?format=json","vulnerability_id":"VCID-g5tz-zaxw-cfa2","summary":"Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering a `StatusOr` value that is an error and forcibly extracting the value from it. We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-99.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-99.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-154.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-154.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L560-L567","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L560-L567"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/955059813cc325dc1db5e2daa6221271406d4439","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/955059813cc325dc1db5e2daa6221271406d4439"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pqrv-8r2f-7278","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pqrv-8r2f-7278"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23590","reference_id":"CVE-2022-23590","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23590"},{"reference_url":"https://github.com/advisories/GHSA-pqrv-8r2f-7278","reference_id":"GHSA-pqrv-8r2f-7278","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-pqrv-8r2f-7278"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23590","GHSA-pqrv-8r2f-7278","PYSEC-2022-154","PYSEC-2022-99"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-g5tz-zaxw-cfa2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35989?format=json","vulnerability_id":"VCID-g7mk-ddes-8fa8","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `ThreadPoolHandle` can be used to trigger a denial of service attack by allocating too much memory. This is because the `num_threads` argument is only checked to not be negative, but there is no upper bound on its value. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-56.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-56.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-111.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-111.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/data/experimental/threadpool_dataset_op.cc#L79-L135","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/data/experimental/threadpool_dataset_op.cc#L79-L135"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e3749a6d5d1e8d11806d4a2e9cc3123d1a90b75e","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e3749a6d5d1e8d11806d4a2e9cc3123d1a90b75e"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c582-c96p-r5cq","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c582-c96p-r5cq"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21732","reference_id":"CVE-2022-21732","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21732"},{"reference_url":"https://github.com/advisories/GHSA-c582-c96p-r5cq","reference_id":"GHSA-c582-c96p-r5cq","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-c582-c96p-r5cq"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21732","GHSA-c582-c96p-r5cq","PYSEC-2022-111","PYSEC-2022-56"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-g7mk-ddes-8fa8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3674?format=json","vulnerability_id":"VCID-gfss-uup9-vbcg","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-591.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-591.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-789.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-789.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-300.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-300.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/1df5a69e9f1a18a937e7907223066e606bf466b9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/1df5a69e9f1a18a937e7907223066e606bf466b9"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/23d6383eb6c14084a8fc3bdf164043b974818012","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/23d6383eb6c14084a8fc3bdf164043b974818012"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/8e47a685785bef8f81bcb996048921dfde08a9ab","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/8e47a685785bef8f81bcb996048921dfde08a9ab"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/a09ab4e77afdcc6e1e045c9d41d5edab63aafc1a","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/a09ab4e77afdcc6e1e045c9d41d5edab63aafc1a"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r6jx-9g48-2r5r","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r6jx-9g48-2r5r"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37678","reference_id":"CVE-2021-37678","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37678"},{"reference_url":"https://github.com/advisories/GHSA-r6jx-9g48-2r5r","reference_id":"GHSA-r6jx-9g48-2r5r","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-r6jx-9g48-2r5r"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37678","GHSA-r6jx-9g48-2r5r","PYSEC-2021-300","PYSEC-2021-591","PYSEC-2021-789"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-gfss-uup9-vbcg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3703?format=json","vulnerability_id":"VCID-gtvx-jmfk-m3as","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-562.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-562.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-760.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-760.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-271.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-271.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/7bdf50bb4f5c54a4997c379092888546c97c3ebd","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/7bdf50bb4f5c54a4997c379092888546c97c3ebd"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6gv8-p3vj-pxvr","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6gv8-p3vj-pxvr"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37649","reference_id":"CVE-2021-37649","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37649"},{"reference_url":"https://github.com/advisories/GHSA-6gv8-p3vj-pxvr","reference_id":"GHSA-6gv8-p3vj-pxvr","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-6gv8-p3vj-pxvr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37649","GHSA-6gv8-p3vj-pxvr","PYSEC-2021-271","PYSEC-2021-562","PYSEC-2021-760"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-gtvx-jmfk-m3as"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5111?format=json","vulnerability_id":"VCID-h638-b3zk-wqfa","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-637.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-637.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-835.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-835.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-420.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-420.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/8b202f08d52e8206af2bdb2112a62fafbc546ec7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/8b202f08d52e8206af2bdb2112a62fafbc546ec7"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3rcw-9p9x-582v","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3rcw-9p9x-582v"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41228","reference_id":"CVE-2021-41228","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41228"},{"reference_url":"https://github.com/advisories/GHSA-3rcw-9p9x-582v","reference_id":"GHSA-3rcw-9p9x-582v","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-3rcw-9p9x-582v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41228","GHSA-3rcw-9p9x-582v","PYSEC-2021-420","PYSEC-2021-637","PYSEC-2021-835"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-h638-b3zk-wqfa"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3662?format=json","vulnerability_id":"VCID-hjh6-h2qm-qqf1","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-603.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-603.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-801.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-801.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-312.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-312.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/ee119d4a498979525046fba1c3dd3f13a039fbb1","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/ee119d4a498979525046fba1c3dd3f13a039fbb1"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3hxh-8cp2-g4hg","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3hxh-8cp2-g4hg"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37690","reference_id":"CVE-2021-37690","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37690"},{"reference_url":"https://github.com/advisories/GHSA-3hxh-8cp2-g4hg","reference_id":"GHSA-3hxh-8cp2-g4hg","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-3hxh-8cp2-g4hg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37690","GHSA-3hxh-8cp2-g4hg","PYSEC-2021-312","PYSEC-2021-603","PYSEC-2021-801"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hjh6-h2qm-qqf1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3691?format=json","vulnerability_id":"VCID-hyby-xv7h-dfhv","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-574.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-574.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-772.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-772.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-283.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-283.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/8a84f7a2b5a2b27ecf88d25bad9ac777cd2f7992","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/8a84f7a2b5a2b27ecf88d25bad9ac777cd2f7992"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf88-j2mg-cc82","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf88-j2mg-cc82"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37661","reference_id":"CVE-2021-37661","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37661"},{"reference_url":"https://github.com/advisories/GHSA-gf88-j2mg-cc82","reference_id":"GHSA-gf88-j2mg-cc82","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-gf88-j2mg-cc82"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37661","GHSA-gf88-j2mg-cc82","PYSEC-2021-283","PYSEC-2021-574","PYSEC-2021-772"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hyby-xv7h-dfhv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3664?format=json","vulnerability_id":"VCID-j5dh-pqjc-6khb","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-601.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-601.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-799.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-799.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-310.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-310.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/internal/optimized/optimized_ops.h#L268-L285","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/internal/optimized/optimized_ops.h#L268-L285"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/15691e456c7dc9bd6be203b09765b063bf4a380c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/15691e456c7dc9bd6be203b09765b063bf4a380c"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vcjj-9vg7-vf68","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vcjj-9vg7-vf68"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37688","reference_id":"CVE-2021-37688","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37688"},{"reference_url":"https://github.com/advisories/GHSA-vcjj-9vg7-vf68","reference_id":"GHSA-vcjj-9vg7-vf68","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-vcjj-9vg7-vf68"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37688","GHSA-vcjj-9vg7-vf68","PYSEC-2021-310","PYSEC-2021-601","PYSEC-2021-799"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-j5dh-pqjc-6khb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35980?format=json","vulnerability_id":"VCID-jgpf-xs7n-sbcn","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `Dequantize` is vulnerable to an integer overflow weakness. The `axis` argument can be `-1` (the default value for the optional argument) or any other positive value at most the number of dimensions of the input. Unfortunately, the upper bound is not checked, and, since the code computes `axis + 1`, an attacker can trigger an integer overflow. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-51.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-51.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-106.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-106.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/ops/array_ops.cc#L3001-L3034","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/ops/array_ops.cc#L3001-L3034"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/b64638ec5ccaa77b7c1eb90958e3d85ce381f91b","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/b64638ec5ccaa77b7c1eb90958e3d85ce381f91b"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c6fh-56w7-fvjw","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c6fh-56w7-fvjw"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21727","reference_id":"CVE-2022-21727","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21727"},{"reference_url":"https://github.com/advisories/GHSA-c6fh-56w7-fvjw","reference_id":"GHSA-c6fh-56w7-fvjw","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-c6fh-56w7-fvjw"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21727","GHSA-c6fh-56w7-fvjw","PYSEC-2022-106","PYSEC-2022-51"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jgpf-xs7n-sbcn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3665?format=json","vulnerability_id":"VCID-jhes-k3ad-eudj","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-600.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-600.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-798.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-798.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-309.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-309.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/gather.cc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/gather.cc"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/gather_nd.cc#L124","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/lite/kernels/gather_nd.cc#L124"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/bb6a0383ed553c286f87ca88c207f6774d5c4a8f","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/bb6a0383ed553c286f87ca88c207f6774d5c4a8f"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/eb921122119a6b6e470ee98b89e65d721663179d","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/eb921122119a6b6e470ee98b89e65d721663179d"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jwf9-w5xm-f437","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jwf9-w5xm-f437"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37687","reference_id":"CVE-2021-37687","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37687"},{"reference_url":"https://github.com/advisories/GHSA-jwf9-w5xm-f437","reference_id":"GHSA-jwf9-w5xm-f437","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-jwf9-w5xm-f437"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37687","GHSA-jwf9-w5xm-f437","PYSEC-2021-309","PYSEC-2021-600","PYSEC-2021-798"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jhes-k3ad-eudj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36009?format=json","vulnerability_id":"VCID-jhq5-zhxm-a3ef","summary":"Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that assertions in `function.cc` would be falsified and crash the Python interpreter. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-95.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-95.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-150.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-150.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/function.cc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/function.cc"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/3d89911481ba6ebe8c88c1c0b595412121e6c645","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/3d89911481ba6ebe8c88c1c0b595412121e6c645"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/dcc21c7bc972b10b6fb95c2fb0f4ab5a59680ec2","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/dcc21c7bc972b10b6fb95c2fb0f4ab5a59680ec2"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-43jf-985q-588j","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-43jf-985q-588j"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23586","reference_id":"CVE-2022-23586","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23586"},{"reference_url":"https://github.com/advisories/GHSA-43jf-985q-588j","reference_id":"GHSA-43jf-985q-588j","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-43jf-985q-588j"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23586","GHSA-43jf-985q-588j","PYSEC-2022-150","PYSEC-2022-95"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jhq5-zhxm-a3ef"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36003?format=json","vulnerability_id":"VCID-jpzs-vcck-6kce","summary":"Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by a `DCHECK`. However, `DCHECK` is a no-op in production builds and an assertion failure in debug builds. In the first case execution proceeds to the dereferencing of the null pointer, whereas in the second case it results in a crash due to the assertion failure. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-79.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-79.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-134.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-134.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/full_type_util.cc#L104-L106","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/full_type_util.cc#L104-L106"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/8a513cec4bec15961fbfdedcaa5376522980455c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/8a513cec4bec15961fbfdedcaa5376522980455c"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9p77-mmrw-69c7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9p77-mmrw-69c7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23570","reference_id":"CVE-2022-23570","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23570"},{"reference_url":"https://github.com/advisories/GHSA-9p77-mmrw-69c7","reference_id":"GHSA-9p77-mmrw-69c7","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-9p77-mmrw-69c7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23570","GHSA-9p77-mmrw-69c7","PYSEC-2022-134","PYSEC-2022-79"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jpzs-vcck-6kce"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3682?format=json","vulnerability_id":"VCID-jzyy-uhc2-mygp","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-583.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-583.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-781.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-781.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-292.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-292.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/42459e4273c2e47a3232cc16c4f4fff3b3a35c38","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/42459e4273c2e47a3232cc16c4f4fff3b3a35c38"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9697-98pf-4rw7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9697-98pf-4rw7"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37670","reference_id":"CVE-2021-37670","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37670"},{"reference_url":"https://github.com/advisories/GHSA-9697-98pf-4rw7","reference_id":"GHSA-9697-98pf-4rw7","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-9697-98pf-4rw7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37670","GHSA-9697-98pf-4rw7","PYSEC-2021-292","PYSEC-2021-583","PYSEC-2021-781"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jzyy-uhc2-mygp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3684?format=json","vulnerability_id":"VCID-k2gy-5yy5-1bda","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-581.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-581.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-779.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-779.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-290.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-290.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/a776040a5e7ebf76eeb7eb923bf1ae417dd4d233","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/a776040a5e7ebf76eeb7eb923bf1ae417dd4d233"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2wmv-37vq-52g5","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2wmv-37vq-52g5"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37668","reference_id":"CVE-2021-37668","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37668"},{"reference_url":"https://github.com/advisories/GHSA-2wmv-37vq-52g5","reference_id":"GHSA-2wmv-37vq-52g5","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-2wmv-37vq-52g5"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37668","GHSA-2wmv-37vq-52g5","PYSEC-2021-290","PYSEC-2021-581","PYSEC-2021-779"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-k2gy-5yy5-1bda"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3673?format=json","vulnerability_id":"VCID-k3c7-w97n-abgn","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-592.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-592.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-790.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-790.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-301.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-301.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/4e2565483d0ffcadc719bd44893fb7f609bb5f12","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/4e2565483d0ffcadc719bd44893fb7f609bb5f12"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g8wg-cjwc-xhhp","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g8wg-cjwc-xhhp"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37679","reference_id":"CVE-2021-37679","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37679"},{"reference_url":"https://github.com/advisories/GHSA-g8wg-cjwc-xhhp","reference_id":"GHSA-g8wg-cjwc-xhhp","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-g8wg-cjwc-xhhp"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37679","GHSA-g8wg-cjwc-xhhp","PYSEC-2021-301","PYSEC-2021-592","PYSEC-2021-790"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-k3c7-w97n-abgn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3694?format=json","vulnerability_id":"VCID-k5j6-8e9q-ebfh","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-571.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-571.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-769.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-769.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-280.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-280.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/ff8894044dfae5568ecbf2ed514c1a37dc394f1b","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/ff8894044dfae5568ecbf2ed514c1a37dc394f1b"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6p5r-g9mq-ggh2","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6p5r-g9mq-ggh2"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37658","reference_id":"CVE-2021-37658","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37658"},{"reference_url":"https://github.com/advisories/GHSA-6p5r-g9mq-ggh2","reference_id":"GHSA-6p5r-g9mq-ggh2","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-6p5r-g9mq-ggh2"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37658","GHSA-6p5r-g9mq-ggh2","PYSEC-2021-280","PYSEC-2021-571","PYSEC-2021-769"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-k5j6-8e9q-ebfh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5133?format=json","vulnerability_id":"VCID-k9e7-kmzx-wqbn","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-845.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-845.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-847.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-847.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-843.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-843.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/4d74d8a00b07441cba090a02e0dd9ed385145bf4","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/4d74d8a00b07441cba090a02e0dd9ed385145bf4"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/4dddb2fd0b01cdd196101afbba6518658a2c9e07","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/4dddb2fd0b01cdd196101afbba6518658a2c9e07"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/579261dcd446385831fe4f7457d802a59685121d","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/579261dcd446385831fe4f7457d802a59685121d"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/68422b215e618df5ad375bcdc6d2052e9fd3080a","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/68422b215e618df5ad375bcdc6d2052e9fd3080a"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/da4aad5946be30e5f049920fa076e1f7ef021261","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/da4aad5946be30e5f049920fa076e1f7ef021261"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e7f497570abb6b4ae5af4970620cd880e4c0c904","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e7f497570abb6b4ae5af4970620cd880e4c0c904"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pgcq-h79j-2f69","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pgcq-h79j-2f69"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41206","reference_id":"CVE-2021-41206","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41206"},{"reference_url":"https://github.com/advisories/GHSA-pgcq-h79j-2f69","reference_id":"GHSA-pgcq-h79j-2f69","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-pgcq-h79j-2f69"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"}],"aliases":["CVE-2021-41206","GHSA-pgcq-h79j-2f69","PYSEC-2021-843","PYSEC-2021-845","PYSEC-2021-847"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-k9e7-kmzx-wqbn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3693?format=json","vulnerability_id":"VCID-kh95-uhfy-4bap","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-572.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-572.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-770.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-770.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-281.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-281.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/93f428fd1768df147171ed674fee1fc5ab8309ec","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/93f428fd1768df147171ed674fee1fc5ab8309ec"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q3g3-h9r4-prrc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q3g3-h9r4-prrc"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37659","reference_id":"CVE-2021-37659","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37659"},{"reference_url":"https://github.com/advisories/GHSA-q3g3-h9r4-prrc","reference_id":"GHSA-q3g3-h9r4-prrc","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-q3g3-h9r4-prrc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37659","GHSA-q3g3-h9r4-prrc","PYSEC-2021-281","PYSEC-2021-572","PYSEC-2021-770"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-kh95-uhfy-4bap"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5117?format=json","vulnerability_id":"VCID-kq2a-p2fu-n7gc","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-631.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-631.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-829.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-829.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-414.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-414.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/25d622ffc432acc736b14ca3904177579e733cc6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/25d622ffc432acc736b14ca3904177579e733cc6"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cpf4-wx82-gxp6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cpf4-wx82-gxp6"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41222","reference_id":"CVE-2021-41222","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41222"},{"reference_url":"https://github.com/advisories/GHSA-cpf4-wx82-gxp6","reference_id":"GHSA-cpf4-wx82-gxp6","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-cpf4-wx82-gxp6"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41222","GHSA-cpf4-wx82-gxp6","PYSEC-2021-414","PYSEC-2021-631","PYSEC-2021-829"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-kq2a-p2fu-n7gc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36000?format=json","vulnerability_id":"VCID-me54-9e62-qfdt","summary":"Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would trigger a division by zero in `BiasAndClamp` implementation. There is no check that the `bias_size` is non zero. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-66.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-66.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-121.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-121.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/lite/kernels/internal/common.h#L75","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/lite/kernels/internal/common.h#L75"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/8c6f391a2282684a25cbfec7687bd5d35261a209","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/8c6f391a2282684a25cbfec7687bd5d35261a209"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf2j-f278-xh4v","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf2j-f278-xh4v"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23557","reference_id":"CVE-2022-23557","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23557"},{"reference_url":"https://github.com/advisories/GHSA-gf2j-f278-xh4v","reference_id":"GHSA-gf2j-f278-xh4v","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-gf2j-f278-xh4v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23557","GHSA-gf2j-f278-xh4v","PYSEC-2022-121","PYSEC-2022-66"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-me54-9e62-qfdt"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36026?format=json","vulnerability_id":"VCID-mgvb-rccx-ffbz","summary":"Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so `flr->config_proto` is `nullptr`. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-103.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-103.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-158.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-158.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/compiler/jit/xla_platform_info.cc#L43-L104","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/compiler/jit/xla_platform_info.cc#L43-L104"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e21af685e1828f7ca65038307df5cc06de4479e8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e21af685e1828f7ca65038307df5cc06de4479e8"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fpcp-9h7m-ffpx","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fpcp-9h7m-ffpx"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23595","reference_id":"CVE-2022-23595","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23595"},{"reference_url":"https://github.com/advisories/GHSA-fpcp-9h7m-ffpx","reference_id":"GHSA-fpcp-9h7m-ffpx","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-fpcp-9h7m-ffpx"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23595","GHSA-fpcp-9h7m-ffpx","PYSEC-2022-103","PYSEC-2022-158"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mgvb-rccx-ffbz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36014?format=json","vulnerability_id":"VCID-mka4-sg7r-v3am","summary":"Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's `SpecializeType` which results in heap OOB read/write. Due to a typo, `arg` is initialized to the `i`th mutable argument in a loop where the loop index is `j`. Hence it is possible to assign to `arg` from outside the vector of arguments. Since this is a mutable proto value, it allows both read and write to outside of bounds data. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-83.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-83.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-138.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-138.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/full_type_util.cc#L81-L102","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/full_type_util.cc#L81-L102"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/0657c83d08845cc434175934c642299de2c0f042","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/0657c83d08845cc434175934c642299de2c0f042"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-77gp-3h4r-6428","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-77gp-3h4r-6428"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23574","reference_id":"CVE-2022-23574","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23574"},{"reference_url":"https://github.com/advisories/GHSA-77gp-3h4r-6428","reference_id":"GHSA-77gp-3h4r-6428","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-77gp-3h4r-6428"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23574","GHSA-77gp-3h4r-6428","PYSEC-2022-138","PYSEC-2022-83"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mka4-sg7r-v3am"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3715?format=json","vulnerability_id":"VCID-n48p-tmcx-nbgz","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-550.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-550.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-748.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-748.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-259.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-259.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/5dc7f6981fdaf74c8c5be41f393df705841fb7c5","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/5dc7f6981fdaf74c8c5be41f393df705841fb7c5"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c9qf-r67m-p7cg","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c9qf-r67m-p7cg"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37637","reference_id":"CVE-2021-37637","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37637"},{"reference_url":"https://github.com/advisories/GHSA-c9qf-r67m-p7cg","reference_id":"GHSA-c9qf-r67m-p7cg","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-c9qf-r67m-p7cg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37637","GHSA-c9qf-r67m-p7cg","PYSEC-2021-259","PYSEC-2021-550","PYSEC-2021-748"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-n48p-tmcx-nbgz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36011?format=json","vulnerability_id":"VCID-n8yf-dh79-83gt","summary":"Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorFlow can produce a memory leak if the image is invalid. After calling `png::CommonInitDecode(..., &decode)`, the `decode` value contains allocated buffers which can only be freed by calling `png::CommonFreeDecode(&decode)`. However, several error case in the function implementation invoke the `OP_REQUIRES` macro which immediately terminates the execution of the function, without allowing for the memory free to occur. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-94.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-94.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-149.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-149.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/image/decode_image_op.cc#L322-L416","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/image/decode_image_op.cc#L322-L416"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/ab51e5b813573dc9f51efa335aebcf2994125ee9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/ab51e5b813573dc9f51efa335aebcf2994125ee9"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fq6p-6334-8gr4","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fq6p-6334-8gr4"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23585","reference_id":"CVE-2022-23585","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23585"},{"reference_url":"https://github.com/advisories/GHSA-fq6p-6334-8gr4","reference_id":"GHSA-fq6p-6334-8gr4","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-fq6p-6334-8gr4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23585","GHSA-fq6p-6334-8gr4","PYSEC-2022-149","PYSEC-2022-94"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-n8yf-dh79-83gt"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5142?format=json","vulnerability_id":"VCID-ngd2-qzsa-ubdv","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-607.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-607.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-805.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-805.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-390.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-390.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/7c1692bd417eb4f9b33ead749a41166d6080af85","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/7c1692bd417eb4f9b33ead749a41166d6080af85"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/a871989d7b6c18cdebf2fb4f0e5c5b62fbc19edf","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/a871989d7b6c18cdebf2fb4f0e5c5b62fbc19edf"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/d81b1351da3e8c884ff836b64458d94e4a157c15","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/d81b1351da3e8c884ff836b64458d94e4a157c15"},{"reference_url":"https://github.com/tensorflow/tensorflow/issues/46890","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/issues/46890"},{"reference_url":"https://github.com/tensorflow/tensorflow/issues/51908","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/issues/51908"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-prcg-wp5q-rv7p","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-prcg-wp5q-rv7p"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41197","reference_id":"CVE-2021-41197","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41197"},{"reference_url":"https://github.com/advisories/GHSA-prcg-wp5q-rv7p","reference_id":"GHSA-prcg-wp5q-rv7p","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-prcg-wp5q-rv7p"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41197","GHSA-prcg-wp5q-rv7p","PYSEC-2021-390","PYSEC-2021-607","PYSEC-2021-805"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ngd2-qzsa-ubdv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35995?format=json","vulnerability_id":"VCID-nu75-chwt-fkdp","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-62.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-62.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-117.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-117.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/count_ops.cc#L168-L273","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/count_ops.cc#L168-L273"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/6f4d3e8139ec724dbbcb40505891c81dd1052c4a","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/6f4d3e8139ec724dbbcb40505891c81dd1052c4a"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x4qx-4fjv-hmw6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x4qx-4fjv-hmw6"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21738","reference_id":"CVE-2022-21738","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21738"},{"reference_url":"https://github.com/advisories/GHSA-x4qx-4fjv-hmw6","reference_id":"GHSA-x4qx-4fjv-hmw6","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-x4qx-4fjv-hmw6"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21738","GHSA-x4qx-4fjv-hmw6","PYSEC-2022-117","PYSEC-2022-62"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nu75-chwt-fkdp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5121?format=json","vulnerability_id":"VCID-p2z3-j6kf-p3dd","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-627.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-627.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-825.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-825.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-410.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-410.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/a8ad3e5e79c75f36edb81e0ba3f3c0c5442aeddc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/a8ad3e5e79c75f36edb81e0ba3f3c0c5442aeddc"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9crf-c6qr-r273","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9crf-c6qr-r273"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41218","reference_id":"CVE-2021-41218","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41218"},{"reference_url":"https://github.com/advisories/GHSA-9crf-c6qr-r273","reference_id":"GHSA-9crf-c6qr-r273","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-9crf-c6qr-r273"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41218","GHSA-9crf-c6qr-r273","PYSEC-2021-410","PYSEC-2021-627","PYSEC-2021-825"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-p2z3-j6kf-p3dd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3683?format=json","vulnerability_id":"VCID-pgwz-utzn-hkh9","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-582.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-582.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-780.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-780.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-291.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-291.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/3a7362750d5c372420aa8f0caf7bf5b5c3d0f52d","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/3a7362750d5c372420aa8f0caf7bf5b5c3d0f52d"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/b5cdbf12ffcaaffecf98f22a6be5a64bb96e4f58","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/b5cdbf12ffcaaffecf98f22a6be5a64bb96e4f58"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vmjw-c2vp-p33c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vmjw-c2vp-p33c"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37669","reference_id":"CVE-2021-37669","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37669"},{"reference_url":"https://github.com/advisories/GHSA-vmjw-c2vp-p33c","reference_id":"GHSA-vmjw-c2vp-p33c","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-vmjw-c2vp-p33c"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37669","GHSA-vmjw-c2vp-p33c","PYSEC-2021-291","PYSEC-2021-582","PYSEC-2021-780"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pgwz-utzn-hkh9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3717?format=json","vulnerability_id":"VCID-ps14-2s8s-u3cr","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-548.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-548.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-746.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-746.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-257.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-257.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/87158f43f05f2720a374f3e6d22a7aaa3a33f750","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/87158f43f05f2720a374f3e6d22a7aaa3a33f750"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cgfm-62j4-v4rf","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cgfm-62j4-v4rf"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37635","reference_id":"CVE-2021-37635","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37635"},{"reference_url":"https://github.com/advisories/GHSA-cgfm-62j4-v4rf","reference_id":"GHSA-cgfm-62j4-v4rf","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-cgfm-62j4-v4rf"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37635","GHSA-cgfm-62j4-v4rf","PYSEC-2021-257","PYSEC-2021-548","PYSEC-2021-746"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ps14-2s8s-u3cr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35996?format=json","vulnerability_id":"VCID-psey-gff8-nyg8","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `*Bincount` operations allows malicious users to cause denial of service by passing in arguments which would trigger a `CHECK`-fail. There are several conditions that the input arguments must satisfy. Some are not caught during shape inference and others are not caught during kernel implementation. This results in `CHECK` failures later when the output tensors get allocated. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-61.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-61.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-116.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-116.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/bincount_op.cc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/bincount_op.cc"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/7019ce4f68925fd01cdafde26f8d8c938f47e6f9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/7019ce4f68925fd01cdafde26f8d8c938f47e6f9"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f2vv-v9cg-qhh7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f2vv-v9cg-qhh7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21737","reference_id":"CVE-2022-21737","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21737"},{"reference_url":"https://github.com/advisories/GHSA-f2vv-v9cg-qhh7","reference_id":"GHSA-f2vv-v9cg-qhh7","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-f2vv-v9cg-qhh7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21737","GHSA-f2vv-v9cg-qhh7","PYSEC-2022-116","PYSEC-2022-61"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-psey-gff8-nyg8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35988?format=json","vulnerability_id":"VCID-pve4-4466-tqah","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ConcatV2` can be used to trigger a denial of service attack via a segfault caused by a type confusion. The `axis` argument is translated into `concat_dim` in the `ConcatShapeHelper` helper function. Then, a value for `min_rank` is computed based on `concat_dim`. This is then used to validate that the `values` tensor has at least the required rank. However, `WithRankAtLeast` receives the lower bound as a 64-bits value and then compares it against the maximum 32-bits integer value that could be represented. Due to the fact that `min_rank` is a 32-bits value and the value of `axis`, the `rank` argument is a negative value, so the error check is bypassed. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-55.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-55.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-110.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-110.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/common_shape_fns.cc#L1961-L2059","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/common_shape_fns.cc#L1961-L2059"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/shape_inference.cc#L345-L358","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/shape_inference.cc#L345-L358"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/08d7b00c0a5a20926363849f611729f53f3ec022","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/08d7b00c0a5a20926363849f611729f53f3ec022"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m4hf-j54p-p353","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m4hf-j54p-p353"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21731","reference_id":"CVE-2022-21731","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21731"},{"reference_url":"https://github.com/advisories/GHSA-m4hf-j54p-p353","reference_id":"GHSA-m4hf-j54p-p353","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-m4hf-j54p-p353"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21731","GHSA-m4hf-j54p-p353","PYSEC-2022-110","PYSEC-2022-55"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pve4-4466-tqah"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3708?format=json","vulnerability_id":"VCID-qa1r-3bun-f7e1","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-557.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-557.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-755.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-755.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-266.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-266.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/8a6e874437670045e6c7dc6154c7412b4a2135e2","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/8a6e874437670045e6c7dc6154c7412b4a2135e2"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27j5-4p9v-pp67","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27j5-4p9v-pp67"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37644","reference_id":"CVE-2021-37644","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37644"},{"reference_url":"https://github.com/advisories/GHSA-27j5-4p9v-pp67","reference_id":"GHSA-27j5-4p9v-pp67","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-27j5-4p9v-pp67"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37644","GHSA-27j5-4p9v-pp67","PYSEC-2021-266","PYSEC-2021-557","PYSEC-2021-755"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qa1r-3bun-f7e1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5126?format=json","vulnerability_id":"VCID-qe3m-tepe-sqbq","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-622.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-622.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-820.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-820.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-405.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-405.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/afac8158d43691661ad083f6dd9e56f327c1dcb7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/afac8158d43691661ad083f6dd9e56f327c1dcb7"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h67m-xg8f-fxcf","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h67m-xg8f-fxcf"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41213","reference_id":"CVE-2021-41213","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41213"},{"reference_url":"https://github.com/advisories/GHSA-h67m-xg8f-fxcf","reference_id":"GHSA-h67m-xg8f-fxcf","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-h67m-xg8f-fxcf"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41213","GHSA-h67m-xg8f-fxcf","PYSEC-2021-405","PYSEC-2021-622","PYSEC-2021-820"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qe3m-tepe-sqbq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5139?format=json","vulnerability_id":"VCID-r184-6v15-tqgm","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-610.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-610.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-808.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-808.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-393.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-393.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/874bda09e6702cd50bac90b453b50bcc65b2769e","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/874bda09e6702cd50bac90b453b50bcc65b2769e"},{"reference_url":"https://github.com/tensorflow/tensorflow/issues/46909","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/issues/46909"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh8h-7j2j-qv4f","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh8h-7j2j-qv4f"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41200","reference_id":"CVE-2021-41200","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41200"},{"reference_url":"https://github.com/advisories/GHSA-gh8h-7j2j-qv4f","reference_id":"GHSA-gh8h-7j2j-qv4f","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-gh8h-7j2j-qv4f"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41200","GHSA-gh8h-7j2j-qv4f","PYSEC-2021-393","PYSEC-2021-610","PYSEC-2021-808"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-r184-6v15-tqgm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35992?format=json","vulnerability_id":"VCID-rapw-1955-2ydq","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `MapStage` is vulnerable a `CHECK`-fail if the key tensor is not a scalar. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-58.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-58.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-113.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-113.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/map_stage_op.cc#L519-L550","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/map_stage_op.cc#L519-L550"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/f57315566d7094f322b784947093406c2aea0d7d","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/f57315566d7094f322b784947093406c2aea0d7d"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gcvh-66ff-4mwm","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gcvh-66ff-4mwm"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21734","reference_id":"CVE-2022-21734","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21734"},{"reference_url":"https://github.com/advisories/GHSA-gcvh-66ff-4mwm","reference_id":"GHSA-gcvh-66ff-4mwm","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-gcvh-66ff-4mwm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21734","GHSA-gcvh-66ff-4mwm","PYSEC-2022-113","PYSEC-2022-58"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rapw-1955-2ydq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35984?format=json","vulnerability_id":"VCID-rgat-jz7g-5qgd","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `StringNGrams` can be used to trigger a denial of service attack by causing an out of memory condition after an integer overflow. We are missing a validation on `pad_witdh` and that result in computing a negative value for `ngram_width` which is later used to allocate parts of the output. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-57.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-57.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-112.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-112.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/string_ngrams_op.cc#L29-L161","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/string_ngrams_op.cc#L29-L161"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/f68fdab93fb7f4ddb4eb438c8fe052753c9413e8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/f68fdab93fb7f4ddb4eb438c8fe052753c9413e8"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-98j8-c9q4-r38g","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-98j8-c9q4-r38g"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21733","reference_id":"CVE-2022-21733","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21733"},{"reference_url":"https://github.com/advisories/GHSA-98j8-c9q4-r38g","reference_id":"GHSA-98j8-c9q4-r38g","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-98j8-c9q4-r38g"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21733","GHSA-98j8-c9q4-r38g","PYSEC-2022-112","PYSEC-2022-57"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rgat-jz7g-5qgd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3679?format=json","vulnerability_id":"VCID-rvbe-fjhx-k3d8","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-586.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-586.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-784.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-784.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-295.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-295.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/d7de67733925de196ec8863a33445b73f9562d1d","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/d7de67733925de196ec8863a33445b73f9562d1d"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-278g-rq84-9hmg","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-278g-rq84-9hmg"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37673","reference_id":"CVE-2021-37673","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37673"},{"reference_url":"https://github.com/advisories/GHSA-278g-rq84-9hmg","reference_id":"GHSA-278g-rq84-9hmg","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-278g-rq84-9hmg"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37673","GHSA-278g-rq84-9hmg","PYSEC-2021-295","PYSEC-2021-586","PYSEC-2021-784"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rvbe-fjhx-k3d8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3675?format=json","vulnerability_id":"VCID-rwm5-mh67-ffak","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-590.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-590.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-788.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-788.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-299.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-299.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/da857cfa0fde8f79ad0afdbc94e88b5d4bbec764","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/da857cfa0fde8f79ad0afdbc94e88b5d4bbec764"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qfpc-5pjr-mh26","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qfpc-5pjr-mh26"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37677","reference_id":"CVE-2021-37677","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37677"},{"reference_url":"https://github.com/advisories/GHSA-qfpc-5pjr-mh26","reference_id":"GHSA-qfpc-5pjr-mh26","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-qfpc-5pjr-mh26"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37677","GHSA-qfpc-5pjr-mh26","PYSEC-2021-299","PYSEC-2021-590","PYSEC-2021-788"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rwm5-mh67-ffak"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36032?format=json","vulnerability_id":"VCID-rz3q-tnf3-mygj","summary":"Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that `TensorByteSize` would trigger `CHECK` failures. `TensorShape` constructor throws a `CHECK`-fail if shape is partial or has a number of elements that would overflow the size of an `int`. The `PartialTensorShape` constructor instead does not cause a `CHECK`-abort if the shape is partial, which is exactly what this function needs to be able to return `-1`. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-91.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-91.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-146.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-146.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/attr_value_util.cc#L46-L50","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/attr_value_util.cc#L46-L50"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/c2426bba00a01de6913738df8fa78e0215fcce02","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/c2426bba00a01de6913738df8fa78e0215fcce02"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4j82-5ccr-4r8v","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4j82-5ccr-4r8v"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23582","reference_id":"CVE-2022-23582","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23582"},{"reference_url":"https://github.com/advisories/GHSA-4j82-5ccr-4r8v","reference_id":"GHSA-4j82-5ccr-4r8v","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-4j82-5ccr-4r8v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23582","GHSA-4j82-5ccr-4r8v","PYSEC-2022-146","PYSEC-2022-91"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-rz3q-tnf3-mygj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35999?format=json","vulnerability_id":"VCID-sb76-qn7q-2ben","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` is vulnerable to a heap overflow. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-64.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-64.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-119.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-119.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/count_ops.cc#L168-L273","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/count_ops.cc#L168-L273"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/2b7100d6cdff36aa21010a82269bc05a6d1cc74a","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/2b7100d6cdff36aa21010a82269bc05a6d1cc74a"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/adbbabdb0d3abb3cdeac69e38a96de1d678b24b3","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/adbbabdb0d3abb3cdeac69e38a96de1d678b24b3"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-44qp-9wwf-734r","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-44qp-9wwf-734r"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21740","reference_id":"CVE-2022-21740","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21740"},{"reference_url":"https://github.com/advisories/GHSA-44qp-9wwf-734r","reference_id":"GHSA-44qp-9wwf-734r","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-44qp-9wwf-734r"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21740","GHSA-44qp-9wwf-734r","PYSEC-2022-119","PYSEC-2022-64"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sb76-qn7q-2ben"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36008?format=json","vulnerability_id":"VCID-sney-upy2-cub5","summary":"Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in `TfLiteIntArrayCreate`. The `TfLiteIntArrayGetSizeInBytes` returns an `int` instead of a `size_t. An attacker can control model inputs such that `computed_size` overflows the size of `int` datatype. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-67.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-67.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-122.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-122.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L24-L33","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L24-L33"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L53-L60","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L53-L60"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/a1e1511dde36b3f8aa27a6ec630838e7ea40e091","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/a1e1511dde36b3f8aa27a6ec630838e7ea40e091"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9gwq-6cwj-47h3","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9gwq-6cwj-47h3"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23558","reference_id":"CVE-2022-23558","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23558"},{"reference_url":"https://github.com/advisories/GHSA-9gwq-6cwj-47h3","reference_id":"GHSA-9gwq-6cwj-47h3","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-9gwq-6cwj-47h3"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23558","GHSA-9gwq-6cwj-47h3","PYSEC-2022-122","PYSEC-2022-67"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sney-upy2-cub5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36024?format=json","vulnerability_id":"VCID-t3m9-6h7k-9uax","summary":"Tensorflow is an Open Source Machine Learning Framework. The `GraphDef` format in TensorFlow does not allow self recursive functions. The runtime assumes that this invariant is satisfied. However, a `GraphDef` containing a fragment such as the following can be consumed when loading a `SavedModel`. This would result in a stack overflow during execution as resolving each `NodeDef` means resolving the function itself and its nodes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-100.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-100.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-155.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-155.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/448a16182065bd08a202d9057dd8ca541e67996c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/448a16182065bd08a202d9057dd8ca541e67996c"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-247x-2f9f-5wp7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-247x-2f9f-5wp7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23591","reference_id":"CVE-2022-23591","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23591"},{"reference_url":"https://github.com/advisories/GHSA-247x-2f9f-5wp7","reference_id":"GHSA-247x-2f9f-5wp7","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-247x-2f9f-5wp7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23591","GHSA-247x-2f9f-5wp7","PYSEC-2022-100","PYSEC-2022-155"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-t3m9-6h7k-9uax"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3709?format=json","vulnerability_id":"VCID-tdhn-4egx-zkfk","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-556.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-556.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-754.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-754.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-265.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-265.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/482da92095c4d48f8784b1f00dda4f81c28d2988","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/482da92095c4d48f8784b1f00dda4f81c28d2988"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fcwc-p4fc-c5cc","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fcwc-p4fc-c5cc"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37643","reference_id":"CVE-2021-37643","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37643"},{"reference_url":"https://github.com/advisories/GHSA-fcwc-p4fc-c5cc","reference_id":"GHSA-fcwc-p4fc-c5cc","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-fcwc-p4fc-c5cc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37643","GHSA-fcwc-p4fc-c5cc","PYSEC-2021-265","PYSEC-2021-556","PYSEC-2021-754"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tdhn-4egx-zkfk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36021?format=json","vulnerability_id":"VCID-tdw3-fns6-6baz","summary":"Tensorflow is an Open Source Machine Learning Framework. When decoding a resource handle tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments. This allows attackers to cause denial of services in TensorFlow processes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-73.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-73.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-128.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-128.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/14fea662350e7c26eb5fe1be2ac31704e5682ee6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/14fea662350e7c26eb5fe1be2ac31704e5682ee6"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8rcj-c8pj-v3m3","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8rcj-c8pj-v3m3"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23564","reference_id":"CVE-2022-23564","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23564"},{"reference_url":"https://github.com/advisories/GHSA-8rcj-c8pj-v3m3","reference_id":"GHSA-8rcj-c8pj-v3m3","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-8rcj-c8pj-v3m3"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23564","GHSA-8rcj-c8pj-v3m3","PYSEC-2022-128","PYSEC-2022-73"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tdw3-fns6-6baz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5115?format=json","vulnerability_id":"VCID-tf8j-fa4n-2qcy","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-633.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-633.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-831.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-831.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-416.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-416.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/67bfd9feeecfb3c61d80f0e46d89c170fbee682b","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/67bfd9feeecfb3c61d80f0e46d89c170fbee682b"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rg3m-hqc5-344v","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rg3m-hqc5-344v"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41224","reference_id":"CVE-2021-41224","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41224"},{"reference_url":"https://github.com/advisories/GHSA-rg3m-hqc5-344v","reference_id":"GHSA-rg3m-hqc5-344v","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-rg3m-hqc5-344v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41224","GHSA-rg3m-hqc5-344v","PYSEC-2021-416","PYSEC-2021-633","PYSEC-2021-831"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tf8j-fa4n-2qcy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5123?format=json","vulnerability_id":"VCID-ty1g-525f-jkan","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-625.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-625.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-823.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-823.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-408.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-408.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/ops/array_ops.cc#L121-L185","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/ops/array_ops.cc#L121-L185"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/c79ba87153ee343401dbe9d1954d7f79e521eb14","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/c79ba87153ee343401dbe9d1954d7f79e521eb14"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3ff2-r28g-w7h9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3ff2-r28g-w7h9"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41216","reference_id":"CVE-2021-41216","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41216"},{"reference_url":"https://github.com/advisories/GHSA-3ff2-r28g-w7h9","reference_id":"GHSA-3ff2-r28g-w7h9","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-3ff2-r28g-w7h9"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41216","GHSA-3ff2-r28g-w7h9","PYSEC-2021-408","PYSEC-2021-625","PYSEC-2021-823"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ty1g-525f-jkan"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35997?format=json","vulnerability_id":"VCID-u197-te8d-jydm","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `QuantizedMaxPool` has an undefined behavior where user controlled inputs can trigger a reference binding to null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-63.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-63.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-118.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-118.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/quantized_pooling_ops.cc#L114-L130","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/quantized_pooling_ops.cc#L114-L130"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/53b0dd6dc5957652f35964af16b892ec9af4a559","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/53b0dd6dc5957652f35964af16b892ec9af4a559"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3mw4-6rj6-74g5","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3mw4-6rj6-74g5"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21739","reference_id":"CVE-2022-21739","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21739"},{"reference_url":"https://github.com/advisories/GHSA-3mw4-6rj6-74g5","reference_id":"GHSA-3mw4-6rj6-74g5","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-3mw4-6rj6-74g5"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21739","GHSA-3mw4-6rj6-74g5","PYSEC-2022-118","PYSEC-2022-63"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-u197-te8d-jydm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5120?format=json","vulnerability_id":"VCID-uqae-1yv2-fuc2","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-628.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-628.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-826.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-826.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-411.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-411.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e6cf28c72ba2eb949ca950d834dd6d66bb01cfae","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e6cf28c72ba2eb949ca950d834dd6d66bb01cfae"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4f99-p9c2-3j8x","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4f99-p9c2-3j8x"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41219","reference_id":"CVE-2021-41219","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41219"},{"reference_url":"https://github.com/advisories/GHSA-4f99-p9c2-3j8x","reference_id":"GHSA-4f99-p9c2-3j8x","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-4f99-p9c2-3j8x"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41219","GHSA-4f99-p9c2-3j8x","PYSEC-2021-411","PYSEC-2021-628","PYSEC-2021-826"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-uqae-1yv2-fuc2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3678?format=json","vulnerability_id":"VCID-urvs-ucet-y7ba","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-587.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-587.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-785.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-785.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-296.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-296.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-068.md","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-068.md"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/136b51f10903e044308cf77117c0ed9871350475","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/136b51f10903e044308cf77117c0ed9871350475"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7ghq-fvr3-pj2x","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7ghq-fvr3-pj2x"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37674","reference_id":"CVE-2021-37674","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37674"},{"reference_url":"https://github.com/advisories/GHSA-7ghq-fvr3-pj2x","reference_id":"GHSA-7ghq-fvr3-pj2x","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-7ghq-fvr3-pj2x"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37674","GHSA-7ghq-fvr3-pj2x","PYSEC-2021-296","PYSEC-2021-587","PYSEC-2021-785"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-urvs-ucet-y7ba"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5135?format=json","vulnerability_id":"VCID-v7xq-gfna-5kfw","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-614.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-614.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-812.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-812.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-397.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-397.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/7731e8dfbe4a56773be5dc94d631611211156659","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/7731e8dfbe4a56773be5dc94d631611211156659"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-786j-5qwq-r36x","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-786j-5qwq-r36x"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41204","reference_id":"CVE-2021-41204","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41204"},{"reference_url":"https://github.com/advisories/GHSA-786j-5qwq-r36x","reference_id":"GHSA-786j-5qwq-r36x","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-786j-5qwq-r36x"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41204","GHSA-786j-5qwq-r36x","PYSEC-2021-397","PYSEC-2021-614","PYSEC-2021-812"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-v7xq-gfna-5kfw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3692?format=json","vulnerability_id":"VCID-vdrh-8w5d-dffg","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-573.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-573.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-771.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-771.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-282.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-282.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e86605c0a336c088b638da02135ea6f9f6753618","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e86605c0a336c088b638da02135ea6f9f6753618"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cm5x-837x-jf3c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cm5x-837x-jf3c"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37660","reference_id":"CVE-2021-37660","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37660"},{"reference_url":"https://github.com/advisories/GHSA-cm5x-837x-jf3c","reference_id":"GHSA-cm5x-837x-jf3c","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-cm5x-837x-jf3c"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37660","GHSA-cm5x-837x-jf3c","PYSEC-2021-282","PYSEC-2021-573","PYSEC-2021-771"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vdrh-8w5d-dffg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35983?format=json","vulnerability_id":"VCID-vfkq-sva3-nybz","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ReverseSequence` does not fully validate the value of `batch_dim` and can result in a heap OOB read. There is a check to make sure the value of `batch_dim` does not go over the rank of the input, but there is no check for negative values. Negative dimensions are allowed in some cases to mimic Python's negative indexing (i.e., indexing from the end of the array), however if the value is too negative then the implementation of `Dim` would access elements before the start of an array. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-52.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-52.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-107.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-107.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/shape_inference.h#L415-L428","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/shape_inference.h#L415-L428"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/ops/array_ops.cc#L1636-L1671","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/ops/array_ops.cc#L1636-L1671"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/37c01fb5e25c3d80213060460196406c43d31995","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/37c01fb5e25c3d80213060460196406c43d31995"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6gmv-pjp9-p8w8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6gmv-pjp9-p8w8"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21728","reference_id":"CVE-2022-21728","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21728"},{"reference_url":"https://github.com/advisories/GHSA-6gmv-pjp9-p8w8","reference_id":"GHSA-6gmv-pjp9-p8w8","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-6gmv-pjp9-p8w8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21728","GHSA-6gmv-pjp9-p8w8","PYSEC-2022-107","PYSEC-2022-52"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vfkq-sva3-nybz"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5134?format=json","vulnerability_id":"VCID-vsxn-sk73-dbg5","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-615.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-615.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-813.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-813.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-398.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-398.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/7cf73a2274732c9d82af51c2bc2cf90d13cd7e6d","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/7cf73a2274732c9d82af51c2bc2cf90d13cd7e6d"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rx-x2rw-pc6f","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rx-x2rw-pc6f"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41205","reference_id":"CVE-2021-41205","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41205"},{"reference_url":"https://github.com/advisories/GHSA-49rx-x2rw-pc6f","reference_id":"GHSA-49rx-x2rw-pc6f","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-49rx-x2rw-pc6f"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41205","GHSA-49rx-x2rw-pc6f","PYSEC-2021-398","PYSEC-2021-615","PYSEC-2021-813"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vsxn-sk73-dbg5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36018?format=json","vulnerability_id":"VCID-w1s8-6nq3-4bgp","summary":"Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that any binary op would trigger `CHECK` failures. This occurs when the protobuf part corresponding to the tensor arguments is modified such that the `dtype` no longer matches the `dtype` expected by the op. In that case, calling the templated binary operator for the binary op would receive corrupted data, due to the type confusion involved. If `Tin` and `Tout` don't match the type of data in `out` and `input_*` tensors then `flat<*>` would interpret it wrongly. In most cases, this would be a silent failure, but we have noticed scenarios where this results in a `CHECK` crash, hence a denial of service. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-92.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-92.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-147.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-147.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/cwise_ops_common.h#L88-L137","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/kernels/cwise_ops_common.h#L88-L137"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/a7c02f1a9bbc35473969618a09ee5f9f5d3e52d9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/a7c02f1a9bbc35473969618a09ee5f9f5d3e52d9"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gjqc-q9g6-q2j3","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gjqc-q9g6-q2j3"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23583","reference_id":"CVE-2022-23583","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23583"},{"reference_url":"https://github.com/advisories/GHSA-gjqc-q9g6-q2j3","reference_id":"GHSA-gjqc-q9g6-q2j3","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-gjqc-q9g6-q2j3"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23583","GHSA-gjqc-q9g6-q2j3","PYSEC-2022-147","PYSEC-2022-92"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-w1s8-6nq3-4bgp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3661?format=json","vulnerability_id":"VCID-wd74-3jrn-tqag","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-604.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-604.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-802.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-802.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-313.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-313.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/0575b640091680cfb70f4dd93e70658de43b94f9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/0575b640091680cfb70f4dd93e70658de43b94f9"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27qf-jwm8-g7f3","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27qf-jwm8-g7f3"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37691","reference_id":"CVE-2021-37691","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37691"},{"reference_url":"https://github.com/advisories/GHSA-27qf-jwm8-g7f3","reference_id":"GHSA-27qf-jwm8-g7f3","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-27qf-jwm8-g7f3"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37691","GHSA-27qf-jwm8-g7f3","PYSEC-2021-313","PYSEC-2021-604","PYSEC-2021-802"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wd74-3jrn-tqag"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5136?format=json","vulnerability_id":"VCID-wdpc-4xjf-pqgh","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-613.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-613.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-811.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-811.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-396.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-396.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/368af875869a204b4ac552b9ddda59f6a46a56ec","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/368af875869a204b4ac552b9ddda59f6a46a56ec"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/abcced051cb1bd8fb05046ac3b6023a7ebcc4578","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/abcced051cb1bd8fb05046ac3b6023a7ebcc4578"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/b619c6f865715ca3b15ef1842b5b95edbaa710ad","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/b619c6f865715ca3b15ef1842b5b95edbaa710ad"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e8dc63704c88007ee4713076605c90188d66f3d2","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e8dc63704c88007ee4713076605c90188d66f3d2"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7pxj-m4jf-r6h2","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7pxj-m4jf-r6h2"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41203","reference_id":"CVE-2021-41203","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41203"},{"reference_url":"https://github.com/advisories/GHSA-7pxj-m4jf-r6h2","reference_id":"GHSA-7pxj-m4jf-r6h2","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-7pxj-m4jf-r6h2"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41203","GHSA-7pxj-m4jf-r6h2","PYSEC-2021-396","PYSEC-2021-613","PYSEC-2021-811"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wdpc-4xjf-pqgh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5140?format=json","vulnerability_id":"VCID-wskj-uyt9-akab","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-609.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-609.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-807.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-807.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-392.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-392.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/e5272d4204ff5b46136a1ef1204fc00597e21837","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/e5272d4204ff5b46136a1ef1204fc00597e21837"},{"reference_url":"https://github.com/tensorflow/tensorflow/issues/46914","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/issues/46914"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hx2-qx8j-qjqm","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hx2-qx8j-qjqm"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41199","reference_id":"CVE-2021-41199","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41199"},{"reference_url":"https://github.com/advisories/GHSA-5hx2-qx8j-qjqm","reference_id":"GHSA-5hx2-qx8j-qjqm","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-5hx2-qx8j-qjqm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41199","GHSA-5hx2-qx8j-qjqm","PYSEC-2021-392","PYSEC-2021-609","PYSEC-2021-807"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wskj-uyt9-akab"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5127?format=json","vulnerability_id":"VCID-xdz6-2ckp-a3dw","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-621.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-621.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-819.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-819.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-404.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-404.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/fa6b7782fbb14aa08d767bc799c531f5e1fb3bb8"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fr77-rrx3-cp7g","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fr77-rrx3-cp7g"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41212","reference_id":"CVE-2021-41212","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41212"},{"reference_url":"https://github.com/advisories/GHSA-fr77-rrx3-cp7g","reference_id":"GHSA-fr77-rrx3-cp7g","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-fr77-rrx3-cp7g"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41212","GHSA-fr77-rrx3-cp7g","PYSEC-2021-404","PYSEC-2021-621","PYSEC-2021-819"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-xdz6-2ckp-a3dw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36017?format=json","vulnerability_id":"VCID-xftt-xdnj-fuhd","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `GetInitOp` is vulnerable to a crash caused by dereferencing a null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-86.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-86.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-141.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-141.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/cc/saved_model/loader_util.cc#L31-L61","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/cc/saved_model/loader_util.cc#L31-L61"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/4f38b1ac8e42727e18a2f0bde06d3bee8e77b250","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/4f38b1ac8e42727e18a2f0bde06d3bee8e77b250"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8cxv-76p7-jxwr","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8cxv-76p7-jxwr"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23577","reference_id":"CVE-2022-23577","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23577"},{"reference_url":"https://github.com/advisories/GHSA-8cxv-76p7-jxwr","reference_id":"GHSA-8cxv-76p7-jxwr","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-8cxv-76p7-jxwr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23577","GHSA-8cxv-76p7-jxwr","PYSEC-2022-141","PYSEC-2022-86"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-xftt-xdnj-fuhd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3663?format=json","vulnerability_id":"VCID-xt2w-1h6g-2qe5","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-602.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-602.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-800.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-800.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-311.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-311.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/compiler/mlir/lite/transforms/optimize.cc#L67-L70","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/compiler/mlir/lite/transforms/optimize.cc#L67-L70"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/d6b57f461b39fd1aa8c1b870f1b974aac3554955","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/d6b57f461b39fd1aa8c1b870f1b974aac3554955"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wf5p-c75w-w3wh","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wf5p-c75w-w3wh"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37689","reference_id":"CVE-2021-37689","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37689"},{"reference_url":"https://github.com/advisories/GHSA-wf5p-c75w-w3wh","reference_id":"GHSA-wf5p-c75w-w3wh","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-wf5p-c75w-w3wh"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37689","GHSA-wf5p-c75w-w3wh","PYSEC-2021-311","PYSEC-2021-602","PYSEC-2021-800"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-xt2w-1h6g-2qe5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/5131?format=json","vulnerability_id":"VCID-y5ak-4gg9-sqaj","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-617.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-617.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-815.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-815.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-400.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-400.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/5c8c9a8bfe750f9743d0c859bae112060b216f5c","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/5c8c9a8bfe750f9743d0c859bae112060b216f5c"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-57wx-m983-2f88","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-57wx-m983-2f88"},{"reference_url":"https://security.archlinux.org/AVG-2529","reference_id":"AVG-2529","reference_type":"","scores":[{"value":"High","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2529"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41208","reference_id":"CVE-2021-41208","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41208"},{"reference_url":"https://github.com/advisories/GHSA-57wx-m983-2f88","reference_id":"GHSA-57wx-m983-2f88","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-57wx-m983-2f88"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24857?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/24858?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/24861?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-34je-dsqs-2qeh"},{"vulnerability":"VCID-3nws-uqh8-wydf"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-e73t-pxc6-k7f3"},{"vulnerability":"VCID-f9a1-y3bw-tkbh"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-hcud-kg7b-zyhx"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"}],"aliases":["CVE-2021-41208","GHSA-57wx-m983-2f88","PYSEC-2021-400","PYSEC-2021-617","PYSEC-2021-815"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-y5ak-4gg9-sqaj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3670?format=json","vulnerability_id":"VCID-yp3u-58s2-wuh6","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-595.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-595.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-793.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-793.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-304.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-304.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/depthwise_conv.cc#L198-L200","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/depthwise_conv.cc#L198-L200"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/4a91f2069f7145aab6ba2d8cfe41be8a110c18a5","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/4a91f2069f7145aab6ba2d8cfe41be8a110c18a5"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/537bc7c723439b9194a358f64d871dd326c18887","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/537bc7c723439b9194a358f64d871dd326c18887"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/8933b8a21280696ab119b63263babdb54c298538","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/8933b8a21280696ab119b63263babdb54c298538"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4c4g-crqm-xrxw","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4c4g-crqm-xrxw"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37682","reference_id":"CVE-2021-37682","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37682"},{"reference_url":"https://github.com/advisories/GHSA-4c4g-crqm-xrxw","reference_id":"GHSA-4c4g-crqm-xrxw","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-4c4g-crqm-xrxw"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37682","GHSA-4c4g-crqm-xrxw","PYSEC-2021-304","PYSEC-2021-595","PYSEC-2021-793"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yp3u-58s2-wuh6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3689?format=json","vulnerability_id":"VCID-ypp9-9yup-33h6","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-576.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-576.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-774.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-774.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-285.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-285.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/6da6620efad397c85493b8f8667b821403516708","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/6da6620efad397c85493b8f8667b821403516708"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g25h-jr74-qp5j","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g25h-jr74-qp5j"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37663","reference_id":"CVE-2021-37663","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37663"},{"reference_url":"https://github.com/advisories/GHSA-g25h-jr74-qp5j","reference_id":"GHSA-g25h-jr74-qp5j","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-g25h-jr74-qp5j"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37663","GHSA-g25h-jr74-qp5j","PYSEC-2021-285","PYSEC-2021-576","PYSEC-2021-774"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ypp9-9yup-33h6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36013?format=json","vulnerability_id":"VCID-yv3z-fhhz-9fa4","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateOutputSize` is vulnerable to an integer overflow if an attacker can create an operation which would involve tensors with large enough number of elements. We can have a large enough number of dimensions in `output_shape.dim()` or just a small number of dimensions being large enough to cause an overflow in the multiplication. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-85.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-85.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-140.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-140.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L1598-L1617","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L1598-L1617"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/b9bd6cfd1c50e6807846af9a86f9b83cafc9c8ae","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/b9bd6cfd1c50e6807846af9a86f9b83cafc9c8ae"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wm93-f238-7v37","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wm93-f238-7v37"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23576","reference_id":"CVE-2022-23576","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23576"},{"reference_url":"https://github.com/advisories/GHSA-wm93-f238-7v37","reference_id":"GHSA-wm93-f238-7v37","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-wm93-f238-7v37"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23576","GHSA-wm93-f238-7v37","PYSEC-2022-140","PYSEC-2022-85"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yv3z-fhhz-9fa4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3686?format=json","vulnerability_id":"VCID-yy39-1a1s-sqe4","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-579.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-579.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-777.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-777.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-288.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-288.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/be7a4de6adfbd303ce08be4332554dff70362612","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/be7a4de6adfbd303ce08be4332554dff70362612"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w4xf-2pqw-5mq7","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w4xf-2pqw-5mq7"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37666","reference_id":"CVE-2021-37666","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37666"},{"reference_url":"https://github.com/advisories/GHSA-w4xf-2pqw-5mq7","reference_id":"GHSA-w4xf-2pqw-5mq7","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-w4xf-2pqw-5mq7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37666","GHSA-w4xf-2pqw-5mq7","PYSEC-2021-288","PYSEC-2021-579","PYSEC-2021-777"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yy39-1a1s-sqe4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35982?format=json","vulnerability_id":"VCID-z8wr-n2z5-pffq","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalAvgPoolGrad` does not consider cases where the input tensors are invalid allowing an attacker to read from outside of bounds of heap. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-54.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-54.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-109.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-109.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/fractional_avg_pool_op.cc#L209-L360","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/fractional_avg_pool_op.cc#L209-L360"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/002408c3696b173863228223d535f9de72a101a9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/002408c3696b173863228223d535f9de72a101a9"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vjg4-v33c-ggc4","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vjg4-v33c-ggc4"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21730","reference_id":"CVE-2022-21730","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21730"},{"reference_url":"https://github.com/advisories/GHSA-vjg4-v33c-ggc4","reference_id":"GHSA-vjg4-v33c-ggc4","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-vjg4-v33c-ggc4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21730","GHSA-vjg4-v33c-ggc4","PYSEC-2022-109","PYSEC-2022-54"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-z8wr-n2z5-pffq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3687?format=json","vulnerability_id":"VCID-zcdc-4zmj-syct","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-578.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-578.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-776.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-776.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-287.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-287.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/203214568f5bc237603dbab6e1fd389f1572f5c9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/203214568f5bc237603dbab6e1fd389f1572f5c9"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/9e62869465573cb2d9b5053f1fa02a81fce21d69","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/9e62869465573cb2d9b5053f1fa02a81fce21d69"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v82p-hv3v-p6qp","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v82p-hv3v-p6qp"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37665","reference_id":"CVE-2021-37665","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37665"},{"reference_url":"https://github.com/advisories/GHSA-v82p-hv3v-p6qp","reference_id":"GHSA-v82p-hv3v-p6qp","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-v82p-hv3v-p6qp"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37665","GHSA-v82p-hv3v-p6qp","PYSEC-2021-287","PYSEC-2021-578","PYSEC-2021-776"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zcdc-4zmj-syct"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35991?format=json","vulnerability_id":"VCID-zfuy-5852-fug5","summary":"Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a denial of service via `CHECK`-fails (i.e., assertion failures). This is similar to TFSA-2021-198 and has similar fixes. We have patched the reported issues in multiple GitHub commits. It is possible that other similar instances exist in TensorFlow, we will issue fixes as these are discovered. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-78.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-78.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-133.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-133.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qj5r-f9mv-rffh","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qj5r-f9mv-rffh"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23569","reference_id":"CVE-2022-23569","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23569"},{"reference_url":"https://github.com/advisories/GHSA-qj5r-f9mv-rffh","reference_id":"GHSA-qj5r-f9mv-rffh","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-qj5r-f9mv-rffh"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23569","GHSA-qj5r-f9mv-rffh","PYSEC-2022-133","PYSEC-2022-78"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zfuy-5852-fug5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/35986?format=json","vulnerability_id":"VCID-zj5j-12r4-4bhp","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseTensorSliceDataset` has an undefined behavior: under certain condition it can be made to dereference a `nullptr` value. The 3 input arguments to `SparseTensorSliceDataset` represent a sparse tensor. However, there are some preconditions that these arguments must satisfy but these are not validated in the implementation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-60.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-60.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-115.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-115.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/data/sparse_tensor_slice_dataset_op.cc#L227-L292","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/data/sparse_tensor_slice_dataset_op.cc#L227-L292"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/965b97e4a9650495cda5a8c210ef6684b4b9eceb","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/965b97e4a9650495cda5a8c210ef6684b4b9eceb"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pfjj-m3jj-9jc9","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pfjj-m3jj-9jc9"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21736","reference_id":"CVE-2022-21736","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21736"},{"reference_url":"https://github.com/advisories/GHSA-pfjj-m3jj-9jc9","reference_id":"GHSA-pfjj-m3jj-9jc9","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-pfjj-m3jj-9jc9"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-21736","GHSA-pfjj-m3jj-9jc9","PYSEC-2022-115","PYSEC-2022-60"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zj5j-12r4-4bhp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3713?format=json","vulnerability_id":"VCID-zmpk-rg58-t3g6","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-552.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-552.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-750.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-750.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-261.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-261.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/9e82dce6e6bd1f36a57e08fa85af213e2b2f2622","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/9e82dce6e6bd1f36a57e08fa85af213e2b2f2622"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh6x-4whr-2qv4","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh6x-4whr-2qv4"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37639","reference_id":"CVE-2021-37639","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37639"},{"reference_url":"https://github.com/advisories/GHSA-gh6x-4whr-2qv4","reference_id":"GHSA-gh6x-4whr-2qv4","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-gh6x-4whr-2qv4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37639","GHSA-gh6x-4whr-2qv4","PYSEC-2021-261","PYSEC-2021-552","PYSEC-2021-750"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zmpk-rg58-t3g6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3695?format=json","vulnerability_id":"VCID-zsqp-n2df-3fcm","summary":"multiple issues","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-570.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-570.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-768.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-768.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-279.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-279.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/f2a673bd34f0d64b8e40a551ac78989d16daad09","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/f2a673bd34f0d64b8e40a551ac78989d16daad09"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5xwc-mrhx-5g3m","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5xwc-mrhx-5g3m"},{"reference_url":"https://security.archlinux.org/AVG-2292","reference_id":"AVG-2292","reference_type":"","scores":[{"value":"Critical","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2292"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37657","reference_id":"CVE-2021-37657","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37657"},{"reference_url":"https://github.com/advisories/GHSA-5xwc-mrhx-5g3m","reference_id":"GHSA-5xwc-mrhx-5g3m","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-5xwc-mrhx-5g3m"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/24854?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-217a-71wn-nybg"},{"vulnerability":"VCID-2hj4-bbfq-xqfj"},{"vulnerability":"VCID-2sak-438s-bbg8"},{"vulnerability":"VCID-2t7w-zpd8-suc9"},{"vulnerability":"VCID-3y5w-424q-8qcn"},{"vulnerability":"VCID-4n1w-zfpr-dugh"},{"vulnerability":"VCID-56kw-66kj-1kb7"},{"vulnerability":"VCID-5781-vzmv-rkg4"},{"vulnerability":"VCID-5j3t-baqf-dbhs"},{"vulnerability":"VCID-65fu-yg2h-zycr"},{"vulnerability":"VCID-68ym-s45d-8bhk"},{"vulnerability":"VCID-6bgf-h7cu-27ec"},{"vulnerability":"VCID-6jvw-p6me-mke6"},{"vulnerability":"VCID-6nfa-78eb-jffv"},{"vulnerability":"VCID-6set-8e9p-nyeu"},{"vulnerability":"VCID-6wh3-uhcu-jqef"},{"vulnerability":"VCID-6xhv-euz8-zkc8"},{"vulnerability":"VCID-6yd6-npyx-93cx"},{"vulnerability":"VCID-76t8-h98v-buhf"},{"vulnerability":"VCID-7avd-xuag-ybbv"},{"vulnerability":"VCID-7gat-e8qw-e7hd"},{"vulnerability":"VCID-7jup-pyyw-c3eg"},{"vulnerability":"VCID-7rgb-m55r-4yhr"},{"vulnerability":"VCID-7z58-8eek-3fg2"},{"vulnerability":"VCID-85jp-mtkt-6kb1"},{"vulnerability":"VCID-87r3-u8t5-m7d2"},{"vulnerability":"VCID-8b1b-hevb-cqht"},{"vulnerability":"VCID-8bz4-tb8u-ckdy"},{"vulnerability":"VCID-af9s-d9qq-tuh7"},{"vulnerability":"VCID-at48-mrdj-a3en"},{"vulnerability":"VCID-au3q-9qpz-pkgy"},{"vulnerability":"VCID-bgt5-979r-auc5"},{"vulnerability":"VCID-bh5b-u3zt-puf9"},{"vulnerability":"VCID-bmvq-fjkr-2fc3"},{"vulnerability":"VCID-bvuf-q5tx-x3ec"},{"vulnerability":"VCID-c5wa-uqe8-yqh1"},{"vulnerability":"VCID-cswq-zynn-h7ct"},{"vulnerability":"VCID-d3qq-2w3d-dqe8"},{"vulnerability":"VCID-dcp4-adwb-efd7"},{"vulnerability":"VCID-ffnh-y8v7-9yg7"},{"vulnerability":"VCID-g3tv-ra2y-hqdn"},{"vulnerability":"VCID-g5tz-zaxw-cfa2"},{"vulnerability":"VCID-g7mk-ddes-8fa8"},{"vulnerability":"VCID-h638-b3zk-wqfa"},{"vulnerability":"VCID-jgpf-xs7n-sbcn"},{"vulnerability":"VCID-jhq5-zhxm-a3ef"},{"vulnerability":"VCID-jpzs-vcck-6kce"},{"vulnerability":"VCID-k9e7-kmzx-wqbn"},{"vulnerability":"VCID-kq2a-p2fu-n7gc"},{"vulnerability":"VCID-me54-9e62-qfdt"},{"vulnerability":"VCID-mgvb-rccx-ffbz"},{"vulnerability":"VCID-mka4-sg7r-v3am"},{"vulnerability":"VCID-n8yf-dh79-83gt"},{"vulnerability":"VCID-ngd2-qzsa-ubdv"},{"vulnerability":"VCID-nu75-chwt-fkdp"},{"vulnerability":"VCID-p2z3-j6kf-p3dd"},{"vulnerability":"VCID-psey-gff8-nyg8"},{"vulnerability":"VCID-pve4-4466-tqah"},{"vulnerability":"VCID-qe3m-tepe-sqbq"},{"vulnerability":"VCID-r184-6v15-tqgm"},{"vulnerability":"VCID-rapw-1955-2ydq"},{"vulnerability":"VCID-rgat-jz7g-5qgd"},{"vulnerability":"VCID-rz3q-tnf3-mygj"},{"vulnerability":"VCID-sb76-qn7q-2ben"},{"vulnerability":"VCID-sney-upy2-cub5"},{"vulnerability":"VCID-t3m9-6h7k-9uax"},{"vulnerability":"VCID-tdw3-fns6-6baz"},{"vulnerability":"VCID-tf8j-fa4n-2qcy"},{"vulnerability":"VCID-ty1g-525f-jkan"},{"vulnerability":"VCID-u197-te8d-jydm"},{"vulnerability":"VCID-uqae-1yv2-fuc2"},{"vulnerability":"VCID-v7xq-gfna-5kfw"},{"vulnerability":"VCID-vfkq-sva3-nybz"},{"vulnerability":"VCID-vsxn-sk73-dbg5"},{"vulnerability":"VCID-w1s8-6nq3-4bgp"},{"vulnerability":"VCID-wdpc-4xjf-pqgh"},{"vulnerability":"VCID-wskj-uyt9-akab"},{"vulnerability":"VCID-xdz6-2ckp-a3dw"},{"vulnerability":"VCID-xftt-xdnj-fuhd"},{"vulnerability":"VCID-y5ak-4gg9-sqaj"},{"vulnerability":"VCID-yv3z-fhhz-9fa4"},{"vulnerability":"VCID-z8wr-n2z5-pffq"},{"vulnerability":"VCID-zfuy-5852-fug5"},{"vulnerability":"VCID-zj5j-12r4-4bhp"},{"vulnerability":"VCID-zztr-pqqn-w7fd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.1"}],"aliases":["CVE-2021-37657","GHSA-5xwc-mrhx-5g3m","PYSEC-2021-279","PYSEC-2021-570","PYSEC-2021-768"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zsqp-n2df-3fcm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36001?format=json","vulnerability_id":"VCID-zztr-pqqn-w7fd","summary":"Tensorflow is an Open Source Machine Learning Framework. The implementation of `Range` suffers from integer overflows. These can trigger undefined behavior or, in some scenarios, extremely large allocations. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","references":[{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-71.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-71.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-126.yaml","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-126.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/f0147751fd5d2ff23251149ebad9af9f03010732","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/commit/f0147751fd5d2ff23251149ebad9af9f03010732"},{"reference_url":"https://github.com/tensorflow/tensorflow/issues/52676","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/issues/52676"},{"reference_url":"https://github.com/tensorflow/tensorflow/pull/51733","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/pull/51733"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qx3f-p745-w4hr","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qx3f-p745-w4hr"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23562","reference_id":"CVE-2022-23562","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23562"},{"reference_url":"https://github.com/advisories/GHSA-qx3f-p745-w4hr","reference_id":"GHSA-qx3f-p745-w4hr","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-qx3f-p745-w4hr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/26593?format=json","purl":"pkg:pypi/tensorflow-gpu@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26594?format=json","purl":"pkg:pypi/tensorflow-gpu@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-g5tz-zaxw-cfa2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26601?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-d3k4-z4f1-hfhy"},{"vulnerability":"VCID-hcud-kg7b-zyhx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"}],"aliases":["CVE-2022-23562","GHSA-qx3f-p745-w4hr","PYSEC-2022-126","PYSEC-2022-71"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zztr-pqqn-w7fd"}],"fixing_vulnerabilities":[],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.5.0"}