{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/8290?format=json","vulnerability_id":"VCID-ffkg-sa3q-8qfq","summary":"Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read as the bounds checking is done in a `DCHECK` (which is a no-op during production). An attacker can control the `input_idx` variable such that `ix` would be larger than the number of values in `node_t.args`. The fix will be included in TensorFlow 2.8.0. This is the only affected version.","aliases":[{"alias":"BIT-tensorflow-2022-23592"},{"alias":"CVE-2022-23592"},{"alias":"GHSA-vq36-27g6-p492"},{"alias":"PYSEC-2022-101"},{"alias":"PYSEC-2022-156"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/209119?format=json","purl":"pkg:deb/debian/tensorflow@0?distro=sid","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/tensorflow@0%3Fdistro=sid"},{"url":"http://public2.vulnerablecode.io/api/packages/209118?format=json","purl":"pkg:deb/debian/tensorflow@2.14.1%2Bdfsg-3.1?distro=sid","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/tensorflow@2.14.1%252Bdfsg-3.1%3Fdistro=sid"},{"url":"http://public2.vulnerablecode.io/api/packages/59424?format=json","purl":"pkg:pypi/tensorflow@2.8.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-15h4-876j-3bdz"},{"vulnerability":"VCID-1hbp-9n5x-tyda"},{"vulnerability":"VCID-1w3g-z5ja-q7cr"},{"vulnerability":"VCID-21pb-qyv3-27cj"},{"vulnerability":"VCID-2311-hknw-2ubh"},{"vulnerability":"VCID-2tx7-szke-f7d8"},{"vulnerability":"VCID-32uz-pmsu-dycn"},{"vulnerability":"VCID-3dun-j9ep-3ugk"},{"vulnerability":"VCID-3fd6-8rv4-8qh3"},{"vulnerability":"VCID-41ax-nrcf-yygf"},{"vulnerability":"VCID-4fcy-hbcs-cuan"},{"vulnerability":"VCID-4mky-qp2e-vbhg"},{"vulnerability":"VCID-4sj6-vagv-2qe4"},{"vulnerability":"VCID-4tyf-xfhm-d3cm"},{"vulnerability":"VCID-4xpd-4a11-k3b7"},{"vulnerability":"VCID-62er-23uz-6qgu"},{"vulnerability":"VCID-62y1-pd1b-vqhr"},{"vulnerability":"VCID-7cu6-jt1f-q7hq"},{"vulnerability":"VCID-7nkk-5pdm-uyck"},{"vulnerability":"VCID-83t5-dg3c-5qa2"},{"vulnerability":"VCID-842j-9ffd-rfcx"},{"vulnerability":"VCID-8dwk-hykt-93a5"},{"vulnerability":"VCID-8zqb-tqfq-7ud7"},{"vulnerability":"VCID-9hzh-a72m-nya3"},{"vulnerability":"VCID-ah8y-bmdk-5khm"},{"vulnerability":"VCID-b4hf-5gqs-yfbw"},{"vulnerability":"VCID-b9p4-ta3s-wbeu"},{"vulnerability":"VCID-bjrr-3t28-rqgp"},{"vulnerability":"VCID-bn6z-c98v-n7bf"},{"vulnerability":"VCID-bqhu-jc1c-z3gw"},{"vulnerability":"VCID-d1hw-1fdb-kfhq"},{"vulnerability":"VCID-degg-b7w4-jyg7"},{"vulnerability":"VCID-djxs-vpxa-5bav"},{"vulnerability":"VCID-e7nb-5swt-r3c9"},{"vulnerability":"VCID-ebu7-ts8t-43br"},{"vulnerability":"VCID-etu4-tnze-h3ag"},{"vulnerability":"VCID-exym-4mq2-rkbj"},{"vulnerability":"VCID-f8ut-vanr-1qbz"},{"vulnerability":"VCID-fkkr-935n-a3ds"},{"vulnerability":"VCID-fr8d-65tt-a7bw"},{"vulnerability":"VCID-g5zp-g143-a3hk"},{"vulnerability":"VCID-g7ud-1f9c-u7bn"},{"vulnerability":"VCID-gh9u-ufcn-6khx"},{"vulnerability":"VCID-gnns-f4aa-wuas"},{"vulnerability":"VCID-gqh9-w7d2-r7ap"},{"vulnerability":"VCID-hdth-hp7r-ebfs"},{"vulnerability":"VCID-hjd9-vujt-g7d2"},{"vulnerability":"VCID-jg5r-hv3s-kuh3"},{"vulnerability":"VCID-jmr2-tp5q-6qau"},{"vulnerability":"VCID-k3rw-xwzv-1uer"},{"vulnerability":"VCID-kdhk-ygud-9bft"},{"vulnerability":"VCID-kjwx-6qbk-37ak"},{"vulnerability":"VCID-m4j4-decm-tkb6"},{"vulnerability":"VCID-mrjt-fjbf-gyeh"},{"vulnerability":"VCID-mzvs-ne4v-4qh7"},{"vulnerability":"VCID-nekm-7jcz-a3au"},{"vulnerability":"VCID-nwcb-zuc2-hudk"},{"vulnerability":"VCID-nymb-futt-vqgf"},{"vulnerability":"VCID-q2n9-eckv-jubc"},{"vulnerability":"VCID-re7v-rdvx-9bav"},{"vulnerability":"VCID-rgug-8jmj-e7hw"},{"vulnerability":"VCID-rsm8-1q5j-7yac"},{"vulnerability":"VCID-s3fs-8v2b-zqem"},{"vulnerability":"VCID-sb8m-6jmx-bkh4"},{"vulnerability":"VCID-sbpr-dnvt-x7eu"},{"vulnerability":"VCID-ss5q-9rxf-pygf"},{"vulnerability":"VCID-tru4-6hk6-yydu"},{"vulnerability":"VCID-uh53-ed93-cfhj"},{"vulnerability":"VCID-unq7-3j4j-q3ew"},{"vulnerability":"VCID-ux3x-2756-n3av"},{"vulnerability":"VCID-v6cz-tyns-73br"},{"vulnerability":"VCID-wfh9-ew6v-nyhy"},{"vulnerability":"VCID-wm5z-8hpe-1ug6"},{"vulnerability":"VCID-ww95-y388-3ben"},{"vulnerability":"VCID-x1r9-72db-xqf6"},{"vulnerability":"VCID-y5s1-jyr5-eqfa"},{"vulnerability":"VCID-y9yr-d3rq-97dq"},{"vulnerability":"VCID-yx57-74vr-rfes"},{"vulnerability":"VCID-z5zj-88jh-cked"},{"vulnerability":"VCID-z6dc-pprc-buar"},{"vulnerability":"VCID-zc6k-2kds-afht"},{"vulnerability":"VCID-ztrz-qnwj-2fhd"},{"vulnerability":"VCID-zun3-rnh3-h3e7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow@2.8.0"},{"url":"http://public2.vulnerablecode.io/api/packages/25375?format=json","purl":"pkg:pypi/tensorflow-cpu@2.8.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-15h4-876j-3bdz"},{"vulnerability":"VCID-1hbp-9n5x-tyda"},{"vulnerability":"VCID-1w3g-z5ja-q7cr"},{"vulnerability":"VCID-21pb-qyv3-27cj"},{"vulnerability":"VCID-2311-hknw-2ubh"},{"vulnerability":"VCID-2tx7-szke-f7d8"},{"vulnerability":"VCID-32uz-pmsu-dycn"},{"vulnerability":"VCID-3dun-j9ep-3ugk"},{"vulnerability":"VCID-3fd6-8rv4-8qh3"},{"vulnerability":"VCID-41ax-nrcf-yygf"},{"vulnerability":"VCID-4fcy-hbcs-cuan"},{"vulnerability":"VCID-4mky-qp2e-vbhg"},{"vulnerability":"VCID-4sj6-vagv-2qe4"},{"vulnerability":"VCID-4tyf-xfhm-d3cm"},{"vulnerability":"VCID-4xpd-4a11-k3b7"},{"vulnerability":"VCID-62er-23uz-6qgu"},{"vulnerability":"VCID-62y1-pd1b-vqhr"},{"vulnerability":"VCID-7cu6-jt1f-q7hq"},{"vulnerability":"VCID-7nkk-5pdm-uyck"},{"vulnerability":"VCID-83t5-dg3c-5qa2"},{"vulnerability":"VCID-842j-9ffd-rfcx"},{"vulnerability":"VCID-8dwk-hykt-93a5"},{"vulnerability":"VCID-8zqb-tqfq-7ud7"},{"vulnerability":"VCID-9hzh-a72m-nya3"},{"vulnerability":"VCID-ah8y-bmdk-5khm"},{"vulnerability":"VCID-b4hf-5gqs-yfbw"},{"vulnerability":"VCID-b9p4-ta3s-wbeu"},{"vulnerability":"VCID-bjrr-3t28-rqgp"},{"vulnerability":"VCID-bn6z-c98v-n7bf"},{"vulnerability":"VCID-d1hw-1fdb-kfhq"},{"vulnerability":"VCID-degg-b7w4-jyg7"},{"vulnerability":"VCID-djxs-vpxa-5bav"},{"vulnerability":"VCID-e7nb-5swt-r3c9"},{"vulnerability":"VCID-ebu7-ts8t-43br"},{"vulnerability":"VCID-etu4-tnze-h3ag"},{"vulnerability":"VCID-exym-4mq2-rkbj"},{"vulnerability":"VCID-f8ut-vanr-1qbz"},{"vulnerability":"VCID-fr8d-65tt-a7bw"},{"vulnerability":"VCID-g5zp-g143-a3hk"},{"vulnerability":"VCID-g7ud-1f9c-u7bn"},{"vulnerability":"VCID-gh9u-ufcn-6khx"},{"vulnerability":"VCID-gnns-f4aa-wuas"},{"vulnerability":"VCID-gqh9-w7d2-r7ap"},{"vulnerability":"VCID-hdth-hp7r-ebfs"},{"vulnerability":"VCID-hjd9-vujt-g7d2"},{"vulnerability":"VCID-jg5r-hv3s-kuh3"},{"vulnerability":"VCID-jmr2-tp5q-6qau"},{"vulnerability":"VCID-k3rw-xwzv-1uer"},{"vulnerability":"VCID-kdhk-ygud-9bft"},{"vulnerability":"VCID-kjwx-6qbk-37ak"},{"vulnerability":"VCID-m4j4-decm-tkb6"},{"vulnerability":"VCID-mrjt-fjbf-gyeh"},{"vulnerability":"VCID-mzvs-ne4v-4qh7"},{"vulnerability":"VCID-nekm-7jcz-a3au"},{"vulnerability":"VCID-nwcb-zuc2-hudk"},{"vulnerability":"VCID-nymb-futt-vqgf"},{"vulnerability":"VCID-q2n9-eckv-jubc"},{"vulnerability":"VCID-re7v-rdvx-9bav"},{"vulnerability":"VCID-rgug-8jmj-e7hw"},{"vulnerability":"VCID-rsm8-1q5j-7yac"},{"vulnerability":"VCID-s3fs-8v2b-zqem"},{"vulnerability":"VCID-sb8m-6jmx-bkh4"},{"vulnerability":"VCID-sbpr-dnvt-x7eu"},{"vulnerability":"VCID-ss5q-9rxf-pygf"},{"vulnerability":"VCID-tru4-6hk6-yydu"},{"vulnerability":"VCID-uh53-ed93-cfhj"},{"vulnerability":"VCID-unq7-3j4j-q3ew"},{"vulnerability":"VCID-ux3x-2756-n3av"},{"vulnerability":"VCID-v6cz-tyns-73br"},{"vulnerability":"VCID-wfh9-ew6v-nyhy"},{"vulnerability":"VCID-wm5z-8hpe-1ug6"},{"vulnerability":"VCID-ww95-y388-3ben"},{"vulnerability":"VCID-x1r9-72db-xqf6"},{"vulnerability":"VCID-y5s1-jyr5-eqfa"},{"vulnerability":"VCID-y9yr-d3rq-97dq"},{"vulnerability":"VCID-yx57-74vr-rfes"},{"vulnerability":"VCID-z5zj-88jh-cked"},{"vulnerability":"VCID-z6dc-pprc-buar"},{"vulnerability":"VCID-zc6k-2kds-afht"},{"vulnerability":"VCID-ztrz-qnwj-2fhd"},{"vulnerability":"VCID-zun3-rnh3-h3e7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.8.0"},{"url":"http://public2.vulnerablecode.io/api/packages/25381?format=json","purl":"pkg:pypi/tensorflow-gpu@2.8.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-15h4-876j-3bdz"},{"vulnerability":"VCID-1hbp-9n5x-tyda"},{"vulnerability":"VCID-1w3g-z5ja-q7cr"},{"vulnerability":"VCID-21pb-qyv3-27cj"},{"vulnerability":"VCID-2311-hknw-2ubh"},{"vulnerability":"VCID-2tx7-szke-f7d8"},{"vulnerability":"VCID-32uz-pmsu-dycn"},{"vulnerability":"VCID-3dun-j9ep-3ugk"},{"vulnerability":"VCID-3fd6-8rv4-8qh3"},{"vulnerability":"VCID-41ax-nrcf-yygf"},{"vulnerability":"VCID-4fcy-hbcs-cuan"},{"vulnerability":"VCID-4mky-qp2e-vbhg"},{"vulnerability":"VCID-4sj6-vagv-2qe4"},{"vulnerability":"VCID-4tyf-xfhm-d3cm"},{"vulnerability":"VCID-4xpd-4a11-k3b7"},{"vulnerability":"VCID-62er-23uz-6qgu"},{"vulnerability":"VCID-62y1-pd1b-vqhr"},{"vulnerability":"VCID-7cu6-jt1f-q7hq"},{"vulnerability":"VCID-7nkk-5pdm-uyck"},{"vulnerability":"VCID-83t5-dg3c-5qa2"},{"vulnerability":"VCID-842j-9ffd-rfcx"},{"vulnerability":"VCID-8dwk-hykt-93a5"},{"vulnerability":"VCID-8zqb-tqfq-7ud7"},{"vulnerability":"VCID-9hzh-a72m-nya3"},{"vulnerability":"VCID-ah8y-bmdk-5khm"},{"vulnerability":"VCID-b4hf-5gqs-yfbw"},{"vulnerability":"VCID-b9p4-ta3s-wbeu"},{"vulnerability":"VCID-bjrr-3t28-rqgp"},{"vulnerability":"VCID-bn6z-c98v-n7bf"},{"vulnerability":"VCID-d1hw-1fdb-kfhq"},{"vulnerability":"VCID-degg-b7w4-jyg7"},{"vulnerability":"VCID-djxs-vpxa-5bav"},{"vulnerability":"VCID-e7nb-5swt-r3c9"},{"vulnerability":"VCID-ebu7-ts8t-43br"},{"vulnerability":"VCID-etu4-tnze-h3ag"},{"vulnerability":"VCID-exym-4mq2-rkbj"},{"vulnerability":"VCID-f8ut-vanr-1qbz"},{"vulnerability":"VCID-fr8d-65tt-a7bw"},{"vulnerability":"VCID-g5zp-g143-a3hk"},{"vulnerability":"VCID-g7ud-1f9c-u7bn"},{"vulnerability":"VCID-gh9u-ufcn-6khx"},{"vulnerability":"VCID-gnns-f4aa-wuas"},{"vulnerability":"VCID-gqh9-w7d2-r7ap"},{"vulnerability":"VCID-hdth-hp7r-ebfs"},{"vulnerability":"VCID-hjd9-vujt-g7d2"},{"vulnerability":"VCID-jg5r-hv3s-kuh3"},{"vulnerability":"VCID-jmr2-tp5q-6qau"},{"vulnerability":"VCID-k3rw-xwzv-1uer"},{"vulnerability":"VCID-kdhk-ygud-9bft"},{"vulnerability":"VCID-kjwx-6qbk-37ak"},{"vulnerability":"VCID-m4j4-decm-tkb6"},{"vulnerability":"VCID-mrjt-fjbf-gyeh"},{"vulnerability":"VCID-mzvs-ne4v-4qh7"},{"vulnerability":"VCID-nekm-7jcz-a3au"},{"vulnerability":"VCID-nwcb-zuc2-hudk"},{"vulnerability":"VCID-nymb-futt-vqgf"},{"vulnerability":"VCID-q2n9-eckv-jubc"},{"vulnerability":"VCID-re7v-rdvx-9bav"},{"vulnerability":"VCID-rgug-8jmj-e7hw"},{"vulnerability":"VCID-rsm8-1q5j-7yac"},{"vulnerability":"VCID-s3fs-8v2b-zqem"},{"vulnerability":"VCID-sb8m-6jmx-bkh4"},{"vulnerability":"VCID-sbpr-dnvt-x7eu"},{"vulnerability":"VCID-ss5q-9rxf-pygf"},{"vulnerability":"VCID-tru4-6hk6-yydu"},{"vulnerability":"VCID-uh53-ed93-cfhj"},{"vulnerability":"VCID-unq7-3j4j-q3ew"},{"vulnerability":"VCID-ux3x-2756-n3av"},{"vulnerability":"VCID-v6cz-tyns-73br"},{"vulnerability":"VCID-wfh9-ew6v-nyhy"},{"vulnerability":"VCID-wm5z-8hpe-1ug6"},{"vulnerability":"VCID-ww95-y388-3ben"},{"vulnerability":"VCID-x1r9-72db-xqf6"},{"vulnerability":"VCID-y5s1-jyr5-eqfa"},{"vulnerability":"VCID-y9yr-d3rq-97dq"},{"vulnerability":"VCID-yx57-74vr-rfes"},{"vulnerability":"VCID-z5zj-88jh-cked"},{"vulnerability":"VCID-z6dc-pprc-buar"},{"vulnerability":"VCID-zc6k-2kds-afht"},{"vulnerability":"VCID-ztrz-qnwj-2fhd"},{"vulnerability":"VCID-zun3-rnh3-h3e7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.0"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/59423?format=json","purl":"pkg:pypi/tensorflow@2.8.0rc0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow@2.8.0rc0"},{"url":"http://public2.vulnerablecode.io/api/packages/23654?format=json","purl":"pkg:pypi/tensorflow-cpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11qd-d7c7-sbdm"},{"vulnerability":"VCID-145d-k5w3-tfgz"},{"vulnerability":"VCID-15nt-6tff-k7gb"},{"vulnerability":"VCID-1ah5-hm7a-ykep"},{"vulnerability":"VCID-1hbp-9n5x-tyda"},{"vulnerability":"VCID-2tx7-szke-f7d8"},{"vulnerability":"VCID-39ck-bm9t-kqhs"},{"vulnerability":"VCID-3czq-3twf-skcg"},{"vulnerability":"VCID-3g5a-5csn-h3d9"},{"vulnerability":"VCID-41ax-nrcf-yygf"},{"vulnerability":"VCID-466y-e26r-rka4"},{"vulnerability":"VCID-4fcy-hbcs-cuan"},{"vulnerability":"VCID-5tpp-sf62-zycs"},{"vulnerability":"VCID-62er-23uz-6qgu"},{"vulnerability":"VCID-6888-uhtp-8ub6"},{"vulnerability":"VCID-6gnj-az99-h7b4"},{"vulnerability":"VCID-7uu3-mfan-4ue5"},{"vulnerability":"VCID-83pe-ztey-dbf4"},{"vulnerability":"VCID-8zqb-tqfq-7ud7"},{"vulnerability":"VCID-97cs-4kx3-37gm"},{"vulnerability":"VCID-9arh-a8wj-wka6"},{"vulnerability":"VCID-akmu-fas1-33h6"},{"vulnerability":"VCID-axj7-aq9m-rqdu"},{"vulnerability":"VCID-b4hf-5gqs-yfbw"},{"vulnerability":"VCID-bn6z-c98v-n7bf"},{"vulnerability":"VCID-ccv1-pgda-r7ba"},{"vulnerability":"VCID-cwvm-wntu-tfck"},{"vulnerability":"VCID-d1hw-1fdb-kfhq"},{"vulnerability":"VCID-d3dc-su6w-s3ag"},{"vulnerability":"VCID-egc6-6pwr-fyej"},{"vulnerability":"VCID-en5f-xtha-cyhp"},{"vulnerability":"VCID-ev23-kazv-nkas"},{"vulnerability":"VCID-ev84-gxjn-6bf1"},{"vulnerability":"VCID-exym-4mq2-rkbj"},{"vulnerability":"VCID-eyqx-7k24-zfhq"},{"vulnerability":"VCID-f25m-udat-n3fd"},{"vulnerability":"VCID-f3cx-k63z-7qde"},{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-fggx-3rzd-8kf5"},{"vulnerability":"VCID-g5zp-g143-a3hk"},{"vulnerability":"VCID-g7ud-1f9c-u7bn"},{"vulnerability":"VCID-g8er-52ns-j7b1"},{"vulnerability":"VCID-g8ts-ghhv-33e3"},{"vulnerability":"VCID-gg98-zkw8-5ben"},{"vulnerability":"VCID-gh9u-ufcn-6khx"},{"vulnerability":"VCID-hujj-6vv2-u3c2"},{"vulnerability":"VCID-jdud-ufqp-4yg5"},{"vulnerability":"VCID-jg5r-hv3s-kuh3"},{"vulnerability":"VCID-k3rw-xwzv-1uer"},{"vulnerability":"VCID-ky4u-eny7-33fy"},{"vulnerability":"VCID-m4na-tgrp-d7fk"},{"vulnerability":"VCID-mtqg-yga8-eqeu"},{"vulnerability":"VCID-mzvs-ne4v-4qh7"},{"vulnerability":"VCID-n62z-1akp-ebck"},{"vulnerability":"VCID-ngkq-s26c-qkfj"},{"vulnerability":"VCID-pe9p-a7nn-8bhj"},{"vulnerability":"VCID-q4zv-syab-bbh8"},{"vulnerability":"VCID-qgr6-bqrc-puhs"},{"vulnerability":"VCID-qxqd-f1bw-y7h4"},{"vulnerability":"VCID-rgug-8jmj-e7hw"},{"vulnerability":"VCID-rsau-jvcr-uudd"},{"vulnerability":"VCID-rt4b-xxm6-xubs"},{"vulnerability":"VCID-s3fs-8v2b-zqem"},{"vulnerability":"VCID-sbpr-dnvt-x7eu"},{"vulnerability":"VCID-tru4-6hk6-yydu"},{"vulnerability":"VCID-ugta-nt2s-27fk"},{"vulnerability":"VCID-uyv6-cmed-a7c3"},{"vulnerability":"VCID-v2nf-1526-nkbp"},{"vulnerability":"VCID-vfgz-fss4-wbgu"},{"vulnerability":"VCID-vgv7-xc3c-1fb3"},{"vulnerability":"VCID-vnn5-y8ez-rub9"},{"vulnerability":"VCID-vpyd-he5n-b3a4"},{"vulnerability":"VCID-vqxg-mnz4-13cg"},{"vulnerability":"VCID-wfh9-ew6v-nyhy"},{"vulnerability":"VCID-ww95-y388-3ben"},{"vulnerability":"VCID-x2t2-4sa6-qygs"},{"vulnerability":"VCID-x5x3-2cyz-xbhe"},{"vulnerability":"VCID-xn72-z6kg-q7bp"},{"vulnerability":"VCID-y8ed-ynrx-37af"},{"vulnerability":"VCID-yvag-32h1-yfc5"},{"vulnerability":"VCID-yvef-kyv2-qbea"},{"vulnerability":"VCID-yx57-74vr-rfes"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/25370?format=json","purl":"pkg:pypi/tensorflow-cpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/25371?format=json","purl":"pkg:pypi/tensorflow-cpu@2.7.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.2"},{"url":"http://public2.vulnerablecode.io/api/packages/25372?format=json","purl":"pkg:pypi/tensorflow-cpu@2.7.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.3"},{"url":"http://public2.vulnerablecode.io/api/packages/80028?format=json","purl":"pkg:pypi/tensorflow-cpu@2.7.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.7.4"},{"url":"http://public2.vulnerablecode.io/api/packages/25373?format=json","purl":"pkg:pypi/tensorflow-cpu@2.8.0rc0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.8.0rc0"},{"url":"http://public2.vulnerablecode.io/api/packages/25374?format=json","purl":"pkg:pypi/tensorflow-cpu@2.8.0rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-cpu@2.8.0rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/23636?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11qd-d7c7-sbdm"},{"vulnerability":"VCID-145d-k5w3-tfgz"},{"vulnerability":"VCID-15nt-6tff-k7gb"},{"vulnerability":"VCID-1ah5-hm7a-ykep"},{"vulnerability":"VCID-1hbp-9n5x-tyda"},{"vulnerability":"VCID-2tx7-szke-f7d8"},{"vulnerability":"VCID-39ck-bm9t-kqhs"},{"vulnerability":"VCID-3czq-3twf-skcg"},{"vulnerability":"VCID-3g5a-5csn-h3d9"},{"vulnerability":"VCID-41ax-nrcf-yygf"},{"vulnerability":"VCID-466y-e26r-rka4"},{"vulnerability":"VCID-4fcy-hbcs-cuan"},{"vulnerability":"VCID-5tpp-sf62-zycs"},{"vulnerability":"VCID-62er-23uz-6qgu"},{"vulnerability":"VCID-6888-uhtp-8ub6"},{"vulnerability":"VCID-6gnj-az99-h7b4"},{"vulnerability":"VCID-7uu3-mfan-4ue5"},{"vulnerability":"VCID-83pe-ztey-dbf4"},{"vulnerability":"VCID-8zqb-tqfq-7ud7"},{"vulnerability":"VCID-97cs-4kx3-37gm"},{"vulnerability":"VCID-9arh-a8wj-wka6"},{"vulnerability":"VCID-akmu-fas1-33h6"},{"vulnerability":"VCID-axj7-aq9m-rqdu"},{"vulnerability":"VCID-b4hf-5gqs-yfbw"},{"vulnerability":"VCID-bn6z-c98v-n7bf"},{"vulnerability":"VCID-ccv1-pgda-r7ba"},{"vulnerability":"VCID-cwvm-wntu-tfck"},{"vulnerability":"VCID-d1hw-1fdb-kfhq"},{"vulnerability":"VCID-d3dc-su6w-s3ag"},{"vulnerability":"VCID-egc6-6pwr-fyej"},{"vulnerability":"VCID-en5f-xtha-cyhp"},{"vulnerability":"VCID-ev23-kazv-nkas"},{"vulnerability":"VCID-ev84-gxjn-6bf1"},{"vulnerability":"VCID-exym-4mq2-rkbj"},{"vulnerability":"VCID-eyqx-7k24-zfhq"},{"vulnerability":"VCID-f25m-udat-n3fd"},{"vulnerability":"VCID-f3cx-k63z-7qde"},{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-fggx-3rzd-8kf5"},{"vulnerability":"VCID-g5zp-g143-a3hk"},{"vulnerability":"VCID-g7ud-1f9c-u7bn"},{"vulnerability":"VCID-g8er-52ns-j7b1"},{"vulnerability":"VCID-g8ts-ghhv-33e3"},{"vulnerability":"VCID-gg98-zkw8-5ben"},{"vulnerability":"VCID-gh9u-ufcn-6khx"},{"vulnerability":"VCID-hujj-6vv2-u3c2"},{"vulnerability":"VCID-jdud-ufqp-4yg5"},{"vulnerability":"VCID-jg5r-hv3s-kuh3"},{"vulnerability":"VCID-k3rw-xwzv-1uer"},{"vulnerability":"VCID-ky4u-eny7-33fy"},{"vulnerability":"VCID-m4na-tgrp-d7fk"},{"vulnerability":"VCID-mtqg-yga8-eqeu"},{"vulnerability":"VCID-mzvs-ne4v-4qh7"},{"vulnerability":"VCID-n62z-1akp-ebck"},{"vulnerability":"VCID-ngkq-s26c-qkfj"},{"vulnerability":"VCID-pe9p-a7nn-8bhj"},{"vulnerability":"VCID-q4zv-syab-bbh8"},{"vulnerability":"VCID-qgr6-bqrc-puhs"},{"vulnerability":"VCID-qxqd-f1bw-y7h4"},{"vulnerability":"VCID-rgug-8jmj-e7hw"},{"vulnerability":"VCID-rsau-jvcr-uudd"},{"vulnerability":"VCID-rt4b-xxm6-xubs"},{"vulnerability":"VCID-s3fs-8v2b-zqem"},{"vulnerability":"VCID-sbpr-dnvt-x7eu"},{"vulnerability":"VCID-tru4-6hk6-yydu"},{"vulnerability":"VCID-ugta-nt2s-27fk"},{"vulnerability":"VCID-uyv6-cmed-a7c3"},{"vulnerability":"VCID-v2nf-1526-nkbp"},{"vulnerability":"VCID-vfgz-fss4-wbgu"},{"vulnerability":"VCID-vgv7-xc3c-1fb3"},{"vulnerability":"VCID-vnn5-y8ez-rub9"},{"vulnerability":"VCID-vpyd-he5n-b3a4"},{"vulnerability":"VCID-vqxg-mnz4-13cg"},{"vulnerability":"VCID-wfh9-ew6v-nyhy"},{"vulnerability":"VCID-ww95-y388-3ben"},{"vulnerability":"VCID-x2t2-4sa6-qygs"},{"vulnerability":"VCID-x5x3-2cyz-xbhe"},{"vulnerability":"VCID-xn72-z6kg-q7bp"},{"vulnerability":"VCID-y8ed-ynrx-37af"},{"vulnerability":"VCID-yvag-32h1-yfc5"},{"vulnerability":"VCID-yvef-kyv2-qbea"},{"vulnerability":"VCID-yx57-74vr-rfes"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/25376?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/25377?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.2"},{"url":"http://public2.vulnerablecode.io/api/packages/25378?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.3"},{"url":"http://public2.vulnerablecode.io/api/packages/80027?format=json","purl":"pkg:pypi/tensorflow-gpu@2.7.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.7.4"},{"url":"http://public2.vulnerablecode.io/api/packages/25379?format=json","purl":"pkg:pypi/tensorflow-gpu@2.8.0rc0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.0rc0"},{"url":"http://public2.vulnerablecode.io/api/packages/25380?format=json","purl":"pkg:pypi/tensorflow-gpu@2.8.0rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-ffkg-sa3q-8qfq"},{"vulnerability":"VCID-uyv6-cmed-a7c3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/tensorflow-gpu@2.8.0rc1"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23592","reference_id":"","reference_type":"","scores":[{"value":"0.00316","scoring_system":"epss","scoring_elements":"0.54937","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23592"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-101.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"value":"7.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-101.yaml"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-156.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"value":"7.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-156.yaml"},{"reference_url":"https://github.com/tensorflow/tensorflow","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"value":"7.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/tensorflow/tensorflow"},{"reference_url":"https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L223-L229","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"value":"7.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:51:19Z/"}],"url":"https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L223-L229"},{"reference_url":"https://github.com/tensorflow/tensorflow/commit/c99d98cd189839dcf51aee94e7437b54b31f8abd","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"value":"7.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:51:19Z/"}],"url":"https://github.com/tensorflow/tensorflow/commit/c99d98cd189839dcf51aee94e7437b54b31f8abd"},{"reference_url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vq36-27g6-p492","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"7.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:51:19Z/"}],"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vq36-27g6-p492"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23592","reference_id":"CVE-2022-23592","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"value":"7.2","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23592"},{"reference_url":"https://github.com/advisories/GHSA-vq36-27g6-p492","reference_id":"GHSA-vq36-27g6-p492","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-vq36-27g6-p492"}],"weaknesses":[{"cwe_id":125,"name":"Out-of-bounds Read","description":"The product reads data past the end, or before the beginning, of the intended buffer."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"7.0 - 8.9","exploitability":"0.5","weighted_severity":"8.0","risk_score":4.0,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ffkg-sa3q-8qfq"}