Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/tensorflow-cpu@2.6.3
purl pkg:pypi/tensorflow-cpu@2.6.3
Next non-vulnerable version 2.12.1
Latest non-vulnerable version 2.12.1
Risk 4.5
Vulnerabilities affecting this package (123)
Vulnerability Summary Fixed by
VCID-15h4-876j-3bdz
Aliases:
CVE-2022-35970
GHSA-g35r-369w-3fqp
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-1hbp-9n5x-tyda
Aliases:
CVE-2022-29211
GHSA-xrp2-fhq4-4q3w
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-1vxc-sbk4-77ef
Aliases:
CVE-2022-41896
GHSA-rmg2-f698-wq35
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-1w3g-z5ja-q7cr
Aliases:
CVE-2022-35960
GHSA-v5xg-3q2c-c2r4
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-21pb-qyv3-27cj
Aliases:
CVE-2022-35999
GHSA-37jf-mjv6-xfqw
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-2311-hknw-2ubh
Aliases:
CVE-2022-35974
GHSA-vgvh-2pf4-jr2x
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-2tx7-szke-f7d8
Aliases:
CVE-2022-29197
GHSA-hrg5-737c-2p56
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-2vyy-ktxf-y7hj
Aliases:
CVE-2023-25666
GHSA-f637-vh3r-vfh2
Incorrect Comparison TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a floating point exception in AudioSpectrogram. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-32uz-pmsu-dycn
Aliases:
CVE-2022-35996
GHSA-q5jv-m6qw-5g37
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-3dun-j9ep-3ugk
Aliases:
CVE-2022-36018
GHSA-m6cv-4fmf-66xf
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-3erq-zcrk-qqaf
Aliases:
CVE-2022-41900
GHSA-xvwp-h6jv-7472
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-3esk-gwz9-wfa4
Aliases:
CVE-2022-41898
GHSA-hq7g-wwwp-q46h
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-3fd6-8rv4-8qh3
Aliases:
CVE-2022-35997
GHSA-p7hr-f446-x6qf
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-3s87-vf5k-cycp
Aliases:
CVE-2022-41895
GHSA-gq2j-cr96-gvqx
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-3yjn-h25c-v3gb
Aliases:
CVE-2023-25667
GHSA-fqm2-gh8w-gr68
Integer Overflow or Wraparound TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * width * channels < 2^32`, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-3zd4-d2hc-87at
Aliases:
CVE-2022-41890
GHSA-h246-cgh4-7475
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-41ax-nrcf-yygf
Aliases:
CVE-2022-29205
GHSA-54ch-gjq5-4976
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-4fcy-hbcs-cuan
Aliases:
CVE-2022-29198
GHSA-mg66-qvc5-rm93
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-4mky-qp2e-vbhg
Aliases:
CVE-2022-36001
GHSA-jqm7-m5q7-3hm5
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-4sj6-vagv-2qe4
Aliases:
CVE-2022-35969
GHSA-q2c3-jpmc-gfjx
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-4tyf-xfhm-d3cm
Aliases:
CVE-2022-35963
GHSA-84jm-4cf3-9jfm
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-4xpd-4a11-k3b7
Aliases:
CVE-2022-35985
GHSA-9942-r22v-78cp
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-5f52-bwtt-m3hn
Aliases:
CVE-2022-41889
GHSA-xxcj-rhqg-m46g
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-5m3b-x2b2-nfer
Aliases:
CVE-2022-41886
GHSA-54pp-c6pp-7fpx
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-5qwh-rm2h-ekc7
Aliases:
CVE-2022-41901
GHSA-g9fm-r5mm-rf9f
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-62er-23uz-6qgu
Aliases:
CVE-2022-29192
GHSA-h2wq-prv9-2f56
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-62y1-pd1b-vqhr
Aliases:
CVE-2022-36017
GHSA-wqmc-pm8c-2jhc
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-6apy-b5ev-hkcj
Aliases:
CVE-2022-41893
GHSA-67pf-62xr-q35m
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-6cr3-ywr5-f7e6
Aliases:
CVE-2023-25668
GHSA-gw97-ff7c-9v96
Heap-based Buffer Overflow TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the control of user, leading to a crash or remote code execution. The fix will be included in TensorFlow version 2.12.0 and will also cherrypick this commit on TensorFlow version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-6nyr-2edx-5qg6
Aliases:
CVE-2023-33976
GHSA-gjh7-xx4r-x345
2.12.1
Affected by 0 other vulnerabilities.
VCID-77cw-2wuq-nued
Aliases:
CVE-2022-41887
GHSA-8fvv-46hw-vpg3
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-7cu6-jt1f-q7hq
Aliases:
CVE-2022-36011
GHSA-fv43-93gv-vm8f
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-7guk-jpt3-eka8
Aliases:
CVE-2022-41899
GHSA-27rc-728f-x5w2
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-7nkk-5pdm-uyck
Aliases:
CVE-2022-35982
GHSA-397c-5g2j-qxpv
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-83t5-dg3c-5qa2
Aliases:
CVE-2022-35967
GHSA-v6h3-348g-6h5x
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-8dhx-4a17-rbcj
Aliases:
CVE-2023-25670
GHSA-49rq-hwc3-x77w
NULL Pointer Dereference TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-8dwk-hykt-93a5
Aliases:
CVE-2022-36012
GHSA-jvhc-5hhr-w3v5
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-8zqb-tqfq-7ud7
Aliases:
CVE-2022-29199
GHSA-p9rc-rmr5-529j
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-9686-ufak-6ufd
Aliases:
CVE-2023-25673
GHSA-647v-r7qq-24fh
Incorrect Comparison TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-9hzh-a72m-nya3
Aliases:
CVE-2022-35984
GHSA-p2xf-8hgm-hpw5
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-ah8y-bmdk-5khm
Aliases:
CVE-2022-35995
GHSA-g9h5-vr8m-x2h4
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-ayew-3cca-tyhz
Aliases:
CVE-2023-25676
GHSA-6wfh-89q8-44jq
NULL Pointer Dereference TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConcat` segfaults with a nullptr dereference when given a parameter `shape` with rank that is not greater than zero. A fix is available in TensorFlow 2.12.0 and 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-b4hf-5gqs-yfbw
Aliases:
CVE-2022-29206
GHSA-rc9w-5c64-9vqq
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-b9p4-ta3s-wbeu
Aliases:
CVE-2022-36013
GHSA-828c-5j5q-vrjq
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-bby1-jzms-6fgm
Aliases:
CVE-2022-41908
GHSA-mv77-9g28-cwg3
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-bjrr-3t28-rqgp
Aliases:
CVE-2022-35983
GHSA-m6vp-8q9j-whx4
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-bn6z-c98v-n7bf
Aliases:
CVE-2022-29203
GHSA-jjm6-4vf7-cjh4
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-d1hw-1fdb-kfhq
Aliases:
CVE-2022-29209
GHSA-f4rr-5m7v-wxcw
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-d6hn-ppha-buc1
Aliases:
CVE-2023-25669
GHSA-rcf8-g8jv-vg6p
Incorrect Comparison TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for `tf.raw_ops.AvgPoolGrad`, it can give a floating point exception. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-dbu5-btf9-2bee
Aliases:
CVE-2023-25660
GHSA-qjqc-vqcf-5qvj
NULL Pointer Dereference TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero, the new method `SummarizeArray<bool>` will reference to a nullptr, leading to a seg fault. A fix is included in TensorFlow version 2.12 and version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-degg-b7w4-jyg7
Aliases:
CVE-2022-35991
GHSA-vm7x-4qhj-rrcq
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-dgbb-1rft-7kdr
Aliases:
CVE-2023-25662
GHSA-7jvm-xxmr-v5cw
Integer Overflow or Wraparound TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 is vulnerable to integer overflow in EditDistance. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-djkj-bbaq-6kdr
Aliases:
CVE-2023-25674
GHSA-gf97-q72m-7579
NULL Pointer Dereference TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix is included in TensorFlow 2.12.0 and 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-djxs-vpxa-5bav
Aliases:
CVE-2022-36005
GHSA-r26c-679w-mrjm
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-dk2p-s22p-hbd8
Aliases:
CVE-2022-41891
GHSA-66vq-54fq-6jvv
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-dx1v-hfa1-xfg6
Aliases:
CVE-2023-25665
GHSA-558h-mq8x-7q9g
NULL Pointer Dereference TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `SparseSparseMaximum` is given invalid sparse tensors as inputs, it can give a null pointer error. A fix is included in TensorFlow version 2.12 and version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-e7nb-5swt-r3c9
Aliases:
CVE-2022-36000
GHSA-fqxc-pvf8-2w9v
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-ebu7-ts8t-43br
Aliases:
CVE-2022-35994
GHSA-fhfc-2q7x-929f
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-etu4-tnze-h3ag
Aliases:
CVE-2022-35935
GHSA-97p7-w86h-vcf9
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-exym-4mq2-rkbj
Aliases:
CVE-2022-29204
GHSA-hx9q-2mx4-m4pg
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-f58d-1zga-jkf2
Aliases:
CVE-2023-25663
GHSA-64jg-wjww-7c5w
NULL Pointer Dereference TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `ctx->step_containter()` is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in TensorFlow 2.12.0 and 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-f8ut-vanr-1qbz
Aliases:
CVE-2022-35965
GHSA-qxpx-j395-pw36
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-fr8d-65tt-a7bw
Aliases:
CVE-2022-35939
GHSA-ffjm-4qwc-7cmf
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-g5zp-g143-a3hk
Aliases:
CVE-2022-29202
GHSA-cwpm-f78v-7m5c
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-g7ud-1f9c-u7bn
Aliases:
CVE-2022-29212
GHSA-8wwm-6264-x792
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-gecu-uvpb-6yak
Aliases:
CVE-2023-25661
GHSA-fxgc-95xx-grvq
TensorFlow Denial of Service vulnerability ### Impact A malicious invalid input crashes a tensorflow model (Check Failed) and can be used to trigger a denial of service attack. To minimize the bug, we built a simple single-layer TensorFlow model containing a Convolution3DTranspose layer, which works well with expected inputs and can be deployed in real-world systems. However, if we call the model with a malicious input which has a zero dimension, it gives Check Failed failure and crashes. ```python import tensorflow as tf class MyModel(tf.keras.Model): def __init__(self): super().__init__() self.conv = tf.keras.layers.Convolution3DTranspose(2, [3,3,3], padding="same") def call(self, input): return self.conv(input) model = MyModel() # Defines a valid model. x = tf.random.uniform([1, 32, 32, 32, 3], minval=0, maxval=0, dtype=tf.float32) # This is a valid input. output = model.predict(x) print(output.shape) # (1, 32, 32, 32, 2) x = tf.random.uniform([1, 32, 32, 0, 3], dtype=tf.float32) # This is an invalid input. output = model(x) # crash ``` This Convolution3DTranspose layer is a very common API in modern neural networks. The ML models containing such vulnerable components could be deployed in ML applications or as cloud services. This failure could be potentially used to trigger a denial of service attack on ML cloud services. ### Patches We have patched the issue in - GitHub commit [948fe6369a5711d4b4568ea9bbf6015c6dfb77e2](https://github.com/tensorflow/tensorflow/commit/948fe6369a5711d4b4568ea9bbf6015c6dfb77e2) - GitHub commit [85db5d07db54b853484bfd358c3894d948c36baf](https://github.com/keras-team/keras/commit/85db5d07db54b853484bfd358c3894d948c36baf). The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 ### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.
2.11.1
Affected by 1 other vulnerability.
VCID-gh9u-ufcn-6khx
Aliases:
CVE-2022-29194
GHSA-h5g4-ppwx-48q2
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-gnns-f4aa-wuas
Aliases:
CVE-2022-35972
GHSA-4pc4-m9mj-v2r9
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-gpta-cf34-vkfe
Aliases:
CVE-2023-25659
GHSA-93vr-9q9m-pj8p
Out-of-bounds Read TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the parameter `indices` for `DynamicStitch` does not match the shape of the parameter `data`, it can trigger an stack OOB read. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-gqh9-w7d2-r7ap
Aliases:
CVE-2022-35952
GHSA-h5vq-gw2c-pq47
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-hdth-hp7r-ebfs
Aliases:
CVE-2022-35987
GHSA-w62h-8xjm-fv49
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-hdyy-j28t-wyc1
Aliases:
CVE-2023-25664
GHSA-6hg6-5c2q-7rcr
Heap-based Buffer Overflow TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-hjd9-vujt-g7d2
Aliases:
CVE-2022-36004
GHSA-mv8m-8x97-937q
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-jg5r-hv3s-kuh3
Aliases:
CVE-2022-29208
GHSA-2r2f-g8mw-9gvr
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-jmr2-tp5q-6qau
Aliases:
CVE-2022-35973
GHSA-689c-r7h2-fv9v
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-k3rw-xwzv-1uer
Aliases:
CVE-2022-29216
GHSA-75c9-jrh4-79mc
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-kdhk-ygud-9bft
Aliases:
CVE-2022-35979
GHSA-v7vw-577f-vp8x
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-kjwx-6qbk-37ak
Aliases:
CVE-2022-35981
GHSA-vxv8-r8q2-63xw
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-m4j4-decm-tkb6
Aliases:
CVE-2022-36019
GHSA-9j4v-pp28-mxv7
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-mrjt-fjbf-gyeh
Aliases:
CVE-2022-35990
GHSA-h7ff-cfc9-wmmh
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-mzvs-ne4v-4qh7
Aliases:
CVE-2022-29213
GHSA-5889-7v45-q28m
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-nekm-7jcz-a3au
Aliases:
CVE-2022-36002
GHSA-mh3m-62v7-68xg
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-nwcb-zuc2-hudk
Aliases:
CVE-2022-35968
GHSA-2475-53vw-vp25
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-nymb-futt-vqgf
Aliases:
CVE-2022-35941
GHSA-mgmh-g2v6-mqw5
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
2.9.2
Affected by 42 other vulnerabilities.
VCID-q2n9-eckv-jubc
Aliases:
CVE-2022-35964
GHSA-f7r5-q7cx-h668
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-r6tc-xmds-nyhv
Aliases:
CVE-2023-25671
GHSA-j5w9-hmfh-4cr6
Out-of-bounds Write TensorFlow is an open source platform for machine learning. There is out-of-bounds access due to mismatched integer type sizes. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-re7v-rdvx-9bav
Aliases:
CVE-2022-36016
GHSA-g468-qj8g-vcjc
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-rgug-8jmj-e7hw
Aliases:
CVE-2022-29200
GHSA-2vv3-56qg-g2cf
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-rsm8-1q5j-7yac
Aliases:
CVE-2022-36026
GHSA-9cr2-8pwr-fhfq
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-rt4b-xxm6-xubs
Aliases:
BIT-tensorflow-2022-23590
CVE-2022-23590
GHSA-pqrv-8r2f-7278
PYSEC-2022-154
PYSEC-2022-99
Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering a `StatusOr` value that is an error and forcibly extracting the value from it. We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.
2.7.1
Affected by 124 other vulnerabilities.
VCID-rzxq-vcmu-m7h5
Aliases:
CVE-2022-41897
GHSA-f2w8-jw48-fr7j
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-s3fs-8v2b-zqem
Aliases:
CVE-2022-29207
GHSA-5wpj-c6f7-24x8
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-s8hv-3hsb-mfca
Aliases:
CVE-2023-27579
GHSA-5w96-866f-6rm8
Incorrect Comparison TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater `filter_input_channel` of less than 1 gives a FPE. This issue has been patched in version 2.12. TensorFlow will also cherrypick the fix commit on TensorFlow 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-sb8m-6jmx-bkh4
Aliases:
CVE-2022-35940
GHSA-x989-q2pq-4q5x
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-sbpr-dnvt-x7eu
Aliases:
CVE-2022-29201
GHSA-pqhm-4wvf-2jg8
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-ss5q-9rxf-pygf
Aliases:
CVE-2022-35992
GHSA-9v8w-xmr4-wgxp
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-svbx-mnnb-eqbg
Aliases:
CVE-2022-41880
GHSA-8w5g-3wcv-9g2j
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-sxk5-athp-f7f1
Aliases:
CVE-2023-25672
GHSA-94mm-g2mv-8p7r
NULL Pointer Dereference TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle scalars in the `values` parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-u133-f98p-zqec
Aliases:
CVE-2023-25675
GHSA-7x4v-9gxg-9hwj
Incorrect Comparison TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.Bincount` segfaults when given a parameter `weights` that is neither the same shape as parameter `arr` nor a length-0 tensor. A fix is included in TensorFlow 2.12.0 and 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-uh53-ed93-cfhj
Aliases:
CVE-2022-36003
GHSA-cv2p-32v3-vhwq
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-unq7-3j4j-q3ew
Aliases:
CVE-2022-35959
GHSA-wxjj-cgcx-r3vq
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-uwq2-a5hb-9fhd
Aliases:
CVE-2023-25658
GHSA-68v3-g9cm-rmm6
Out-of-bounds Read TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, an out-of-bounds read is in GRUBlockCellGrad. A fix is included in TensorFlow 2.12.0 and 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-ux3x-2756-n3av
Aliases:
CVE-2022-41885
GHSA-762h-vpvw-3rcx
2.7.4
Affected by 44 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-uxg4-9qfy-tbg6
Aliases:
CVE-2023-25801
GHSA-f49c-87jh-g47q
Double Free TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_max_pool_v2` require the first and fourth elements of their parameter `pooling_ratio` to be equal to 1.0, as pooling on batch and channel dimensions is not supported. A fix is included in TensorFlow 2.12.0 and 2.11.1.
2.11.1
Affected by 1 other vulnerability.
VCID-v6cz-tyns-73br
Aliases:
CVE-2022-35937
GHSA-pxrw-j2fv-hx3h
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-vbq8-42vx-b3hz
Aliases:
CVE-2022-41907
GHSA-368v-7v32-52fx
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-wfh9-ew6v-nyhy
Aliases:
CVE-2022-29191
GHSA-fv25-wrff-wf86
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-wm5z-8hpe-1ug6
Aliases:
CVE-2022-36027
GHSA-79h2-q768-fpxr
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-ww95-y388-3ben
Aliases:
CVE-2022-29196
GHSA-5v77-j66x-4c4g
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-x1r9-72db-xqf6
Aliases:
CVE-2022-36014
GHSA-7j3m-8g3c-9qqq
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-xp3m-ntp9-6bf4
Aliases:
CVE-2022-41909
GHSA-rjx6-v474-2ch9
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-y5s1-jyr5-eqfa
Aliases:
CVE-2022-35989
GHSA-j43h-pgmg-5hjq
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-y9yr-d3rq-97dq
Aliases:
CVE-2022-35934
GHSA-f4w6-h4f5-wx45
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-yvdh-xkxd-uyb2
Aliases:
CVE-2022-41888
GHSA-6x99-gv2v-q76v
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-yx57-74vr-rfes
Aliases:
CVE-2022-29195
GHSA-h48f-q7rw-hvr7
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
VCID-z5zj-88jh-cked
Aliases:
CVE-2022-36015
GHSA-rh87-q4vg-m45j
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-z6dc-pprc-buar
Aliases:
CVE-2022-35966
GHSA-4w68-4x85-mjj9
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-zc6k-2kds-afht
Aliases:
CVE-2022-35971
GHSA-9fpg-838v-wpv7
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-zd9x-yen4-pkdf
Aliases:
CVE-2022-41884
GHSA-jq6x-99hj-q636
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-ztrz-qnwj-2fhd
Aliases:
CVE-2022-35988
GHSA-9vqj-64pv-w55c
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-zts1-n99c-cuh1
Aliases:
CVE-2022-41911
GHSA-pf36-r9c6-h97j
2.8.4
Affected by 23 other vulnerabilities.
2.9.3
Affected by 22 other vulnerabilities.
2.10.1
Affected by 22 other vulnerabilities.
VCID-zun3-rnh3-h3e7
Aliases:
CVE-2022-35993
GHSA-wq6q-6m32-9rv9
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
2.9.1
Affected by 42 other vulnerabilities.
VCID-zw94-ns7h-6qg3
Aliases:
CVE-2022-29193
GHSA-2p9q-h29j-3f5v
2.6.4
Affected by 100 other vulnerabilities.
2.7.2
Affected by 45 other vulnerabilities.
2.8.1
Affected by 42 other vulnerabilities.
Vulnerabilities fixed by this package (55)
Vulnerability Summary Aliases
VCID-11qd-d7c7-sbdm Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ConcatV2` can be used to trigger a denial of service attack via a segfault caused by a type confusion. The `axis` argument is translated into `concat_dim` in the `ConcatShapeHelper` helper function. Then, a value for `min_rank` is computed based on `concat_dim`. This is then used to validate that the `values` tensor has at least the required rank. However, `WithRankAtLeast` receives the lower bound as a 64-bits value and then compares it against the maximum 32-bits integer value that could be represented. Due to the fact that `min_rank` is a 32-bits value and the value of `axis`, the `rank` argument is a negative value, so the error check is bypassed. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21731
CVE-2022-21731
GHSA-m4hf-j54p-p353
PYSEC-2022-110
PYSEC-2022-55
VCID-145d-k5w3-tfgz Tensorflow is an Open Source Machine Learning Framework. The implementations of `Sparse*Cwise*` ops are vulnerable to integer overflows. These can be used to trigger large allocations (so, OOM based denial of service) or `CHECK`-fails when building new `TensorShape` objects (so, assert failures based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large `TensorShape` with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23567
CVE-2022-23567
GHSA-rrx2-r989-2c43
PYSEC-2022-131
PYSEC-2022-76
VCID-15nt-6tff-k7gb Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23587
CVE-2022-23587
GHSA-8jj7-5vxc-pg2q
PYSEC-2022-151
PYSEC-2022-96
VCID-1ah5-hm7a-ykep Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalAvgPoolGrad` does not consider cases where the input tensors are invalid allowing an attacker to read from outside of bounds of heap. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21730
CVE-2022-21730
GHSA-vjg4-v33c-ggc4
PYSEC-2022-109
PYSEC-2022-54
VCID-39ck-bm9t-kqhs Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would trigger a division by zero in `BiasAndClamp` implementation. There is no check that the `bias_size` is non zero. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23557
CVE-2022-23557
GHSA-gf2j-f278-xh4v
PYSEC-2022-121
PYSEC-2022-66
VCID-3czq-3twf-skcg Tensorflow is an Open Source Machine Learning Framework. The implementation of `AssignOp` can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized (to minimize number of allocations), but does not check that the right hand side is also initialized. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23573
CVE-2022-23573
GHSA-q85f-69q7-55h2
PYSEC-2022-137
PYSEC-2022-82
VCID-3g5a-5csn-h3d9 Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that Grappler optimizer would attempt to build a tensor using a reference `dtype`. This would result in a crash due to a `CHECK`-fail in the `Tensor` constructor as reference types are not allowed. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23588
CVE-2022-23588
GHSA-fx5c-h9f6-rv7c
PYSEC-2022-152
PYSEC-2022-97
VCID-466y-e26r-rka4 Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so `flr->config_proto` is `nullptr`. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23595
CVE-2022-23595
GHSA-fpcp-9h7m-ffpx
PYSEC-2022-103
PYSEC-2022-158
VCID-5tpp-sf62-zycs Tensorflow is an Open Source Machine Learning Framework. In multiple places, TensorFlow uses `tempfile.mktemp` to create temporary files. While this is acceptable in testing, in utilities and libraries it is dangerous as a different process can create the file between the check for the filename in `mktemp` and the actual creation of the file by a subsequent operation (a TOC/TOU type of weakness). In several instances, TensorFlow was supposed to actually create a temporary directory instead of a file. This logic bug is hidden away by the `mktemp` function usage. We have patched the issue in several commits, replacing `mktemp` with the safer `mkstemp`/`mkdtemp` functions, according to the usage pattern. Users are advised to upgrade as soon as possible. BIT-tensorflow-2022-23563
CVE-2022-23563
GHSA-wc4g-r73w-x8mm
PYSEC-2022-127
PYSEC-2022-72
VCID-6888-uhtp-8ub6 Tensorflow is an Open Source Machine Learning Framework. The implementation of `*Bincount` operations allows malicious users to cause denial of service by passing in arguments which would trigger a `CHECK`-fail. There are several conditions that the input arguments must satisfy. Some are not caught during shape inference and others are not caught during kernel implementation. This results in `CHECK` failures later when the output tensors get allocated. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21737
CVE-2022-21737
GHSA-f2vv-v9cg-qhh7
PYSEC-2022-116
PYSEC-2022-61
VCID-6gnj-az99-h7b4 Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalMaxPool` can be made to crash a TensorFlow process via a division by 0. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21735
CVE-2022-21735
GHSA-87v6-crgm-2gfj
PYSEC-2022-114
PYSEC-2022-59
VCID-83pe-ztey-dbf4 Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a denial of service via `CHECK`-fails (i.e., assertion failures). This is similar to TFSA-2021-198 and has similar fixes. We have patched the reported issues in multiple GitHub commits. It is possible that other similar instances exist in TensorFlow, we will issue fixes as these are discovered. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23569
CVE-2022-23569
GHSA-qj5r-f9mv-rffh
PYSEC-2022-133
PYSEC-2022-78
VCID-97cs-4kx3-37gm Tensorflow is an Open Source Machine Learning Framework. The implementation of `StringNGrams` can be used to trigger a denial of service attack by causing an out of memory condition after an integer overflow. We are missing a validation on `pad_witdh` and that result in computing a negative value for `ngram_width` which is later used to allocate parts of the output. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21733
CVE-2022-21733
GHSA-98j8-c9q4-r38g
PYSEC-2022-112
PYSEC-2022-57
VCID-9arh-a8wj-wka6 Tensorflow is an Open Source Machine Learning Framework. The implementation of `MapStage` is vulnerable a `CHECK`-fail if the key tensor is not a scalar. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21734
CVE-2022-21734
GHSA-gcvh-66ff-4mwm
PYSEC-2022-113
PYSEC-2022-58
VCID-akmu-fas1-33h6 Tensorflow is an Open Source Machine Learning Framework. ### Impact An attacker can craft a TFLite model that would trigger a division by zero in the implementation of depthwise convolutions. The parameters of the convolution can be user controlled and are also used within a division operation to determine the size of the padding that needs to be added before applying the convolution. There is no check before this division that the divisor is strictly positive. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21741
CVE-2022-21741
GHSA-428x-9xc2-m8mj
PYSEC-2022-120
PYSEC-2022-65
VCID-axj7-aq9m-rqdu Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments, if the tensors have an invalid `dtype` and 0 elements or an invalid shape. This allows attackers to cause denial of services in TensorFlow processes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23571
CVE-2022-23571
GHSA-j3mj-fhpq-qqjj
PYSEC-2022-135
PYSEC-2022-80
VCID-ccv1-pgda-r7ba Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a heap OOB write in `Grappler`. The `set_output` function writes to an array at the specified index. Hence, this gives a malicious user a write primitive. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23566
CVE-2022-23566
GHSA-5qw5-89mw-wcg2
PYSEC-2022-130
PYSEC-2022-75
VCID-cwvm-wntu-tfck Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `SafeToRemoveIdentity` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23579
CVE-2022-23579
GHSA-5f2r-qp73-37mr
PYSEC-2022-143
PYSEC-2022-88
VCID-d3dc-su6w-s3ag Tensorflow is an Open Source Machine Learning Framework. The implementation of `Dequantize` does not fully validate the value of `axis` and can result in heap OOB accesses. The `axis` argument can be `-1` (the default value for the optional argument) or any other positive value at most the number of dimensions of the input. Unfortunately, the upper bound is not checked and this results in reading past the end of the array containing the dimensions of the input tensor. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21726
CVE-2022-21726
GHSA-23hm-7w47-xw72
PYSEC-2022-105
PYSEC-2022-50
VCID-egc6-6pwr-fyej Tensorflow is an Open Source Machine Learning Framework. The implementation of `GetInitOp` is vulnerable to a crash caused by dereferencing a null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23577
CVE-2022-23577
GHSA-8cxv-76p7-jxwr
PYSEC-2022-141
PYSEC-2022-86
VCID-en5f-xtha-cyhp Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that assertions in `function.cc` would be falsified and crash the Python interpreter. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23586
CVE-2022-23586
GHSA-43jf-985q-588j
PYSEC-2022-150
PYSEC-2022-95
VCID-ev23-kazv-nkas Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateTensorSize` is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23575
CVE-2022-23575
GHSA-c94w-c95p-phf8
PYSEC-2022-139
PYSEC-2022-84
VCID-ev84-gxjn-6bf1 Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `Dequantize` is vulnerable to an integer overflow weakness. The `axis` argument can be `-1` (the default value for the optional argument) or any other positive value at most the number of dimensions of the input. Unfortunately, the upper bound is not checked, and, since the code computes `axis + 1`, an attacker can trigger an integer overflow. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21727
CVE-2022-21727
GHSA-c6fh-56w7-fvjw
PYSEC-2022-106
PYSEC-2022-51
VCID-eyqx-7k24-zfhq Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21738
CVE-2022-21738
GHSA-x4qx-4fjv-hmw6
PYSEC-2022-117
PYSEC-2022-62
VCID-f25m-udat-n3fd Tensorflow is an Open Source Machine Learning Framework. The implementation of `Range` suffers from integer overflows. These can trigger undefined behavior or, in some scenarios, extremely large allocations. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23562
CVE-2022-23562
GHSA-qx3f-p745-w4hr
PYSEC-2022-126
PYSEC-2022-71
VCID-f3cx-k63z-7qde Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operations. Both `embedding_size` and `lookup_size` are products of values provided by the user. Hence, a malicious user could trigger overflows in the multiplication. In certain scenarios, this can then result in heap OOB read/write. Users are advised to upgrade to a patched version. BIT-tensorflow-2022-23559
CVE-2022-23559
GHSA-98p5-x8x4-c9m5
PYSEC-2022-123
PYSEC-2022-68
VCID-fggx-3rzd-8kf5 Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorFlow can produce a memory leak if the image is invalid. After calling `png::CommonInitDecode(..., &decode)`, the `decode` value contains allocated buffers which can only be freed by calling `png::CommonFreeDecode(&decode)`. However, several error case in the function implementation invoke the `OP_REQUIRES` macro which immediately terminates the execution of the function, without allowing for the memory free to occur. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23585
CVE-2022-23585
GHSA-fq6p-6334-8gr4
PYSEC-2022-149
PYSEC-2022-94
VCID-g8er-52ns-j7b1 Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ReverseSequence` does not fully validate the value of `batch_dim` and can result in a heap OOB read. There is a check to make sure the value of `batch_dim` does not go over the rank of the input, but there is no check for negative values. Negative dimensions are allowed in some cases to mimic Python's negative indexing (i.e., indexing from the end of the array), however if the value is too negative then the implementation of `Dim` would access elements before the start of an array. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21728
CVE-2022-21728
GHSA-6gmv-pjp9-p8w8
PYSEC-2022-107
PYSEC-2022-52
VCID-g8ts-ghhv-33e3 Tensorflow is an Open Source Machine Learning Framework. During shape inference, TensorFlow can allocate a large vector based on a value from a tensor controlled by the user. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23580
CVE-2022-23580
GHSA-627q-g293-49q7
PYSEC-2022-144
PYSEC-2022-89
VCID-gg98-zkw8-5ben Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can be made to execute a division by 0. The function fails to check that the stride argument is strictly positive. Hence, the fix is to add a check for the stride argument to ensure it is valid. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21725
CVE-2022-21725
GHSA-v3f7-j968-4h5f
PYSEC-2022-104
PYSEC-2022-49
VCID-hujj-6vv2-u3c2 Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that any binary op would trigger `CHECK` failures. This occurs when the protobuf part corresponding to the tensor arguments is modified such that the `dtype` no longer matches the `dtype` expected by the op. In that case, calling the templated binary operator for the binary op would receive corrupted data, due to the type confusion involved. If `Tin` and `Tout` don't match the type of data in `out` and `input_*` tensors then `flat<*>` would interpret it wrongly. In most cases, this would be a silent failure, but we have noticed scenarios where this results in a `CHECK` crash, hence a denial of service. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23583
CVE-2022-23583
GHSA-gjqc-q9g6-q2j3
PYSEC-2022-147
PYSEC-2022-92
VCID-jdud-ufqp-4yg5 Tensorflow is an Open Source Machine Learning Framework. The `GraphDef` format in TensorFlow does not allow self recursive functions. The runtime assumes that this invariant is satisfied. However, a `GraphDef` containing a fragment such as the following can be consumed when loading a `SavedModel`. This would result in a stack overflow during execution as resolving each `NodeDef` means resolving the function itself and its nodes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23591
CVE-2022-23591
GHSA-247x-2f9f-5wp7
PYSEC-2022-100
PYSEC-2022-155
VCID-ky4u-eny7-33fy Tensorflow is an Open Source Machine Learning Framework. The implementation of `UnravelIndex` is vulnerable to a division by zero caused by an integer overflow bug. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21729
CVE-2022-21729
GHSA-34f9-hjfq-rr8j
PYSEC-2022-108
PYSEC-2022-53
VCID-m4na-tgrp-d7fk Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateOutputSize` is vulnerable to an integer overflow if an attacker can create an operation which would involve tensors with large enough number of elements. We can have a large enough number of dimensions in `output_shape.dim()` or just a small number of dimensions being large enough to cause an overflow in the multiplication. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23576
CVE-2022-23576
GHSA-wm93-f238-7v37
PYSEC-2022-140
PYSEC-2022-85
VCID-mtqg-yga8-eqeu Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `IsSimplifiableReshape` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23581
CVE-2022-23581
GHSA-fq86-3f29-px2c
PYSEC-2022-145
PYSEC-2022-90
VCID-n62z-1akp-ebck Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a use after free behavior when decoding PNG images. After `png::CommonFreeDecode(&decode)` gets called, the values of `decode.width` and `decode.height` are in an unspecified state. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23584
CVE-2022-23584
GHSA-24x4-6qmh-88qg
PYSEC-2022-148
PYSEC-2022-93
VCID-ngkq-s26c-qkfj Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow can trigger a null pointer dereference. There are 2 places where this can occur, for the same malicious alteration of a `SavedModel` file (fixing the first one would trigger the same dereference in the second place). First, during constant folding, the `GraphDef` might not have the required nodes for the binary operation. If a node is missing, the correposning `mul_*child` would be null, and the dereference in the subsequent line would be incorrect. We have a similar issue during `IsIdentityConsumingSwitch`. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23589
CVE-2022-23589
GHSA-9px9-73fg-3fqp
PYSEC-2022-153
PYSEC-2022-98
VCID-pe9p-a7nn-8bhj Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that `TensorByteSize` would trigger `CHECK` failures. `TensorShape` constructor throws a `CHECK`-fail if shape is partial or has a number of elements that would overflow the size of an `int`. The `PartialTensorShape` constructor instead does not cause a `CHECK`-abort if the shape is partial, which is exactly what this function needs to be able to return `-1`. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23582
CVE-2022-23582
GHSA-4j82-5ccr-4r8v
PYSEC-2022-146
PYSEC-2022-91
VCID-q4zv-syab-bbh8 Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in `TfLiteIntArrayCreate`. The `TfLiteIntArrayGetSizeInBytes` returns an `int` instead of a `size_t. An attacker can control model inputs such that `computed_size` overflows the size of `int` datatype. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23558
CVE-2022-23558
GHSA-9gwq-6cwj-47h3
PYSEC-2022-122
PYSEC-2022-67
VCID-qgr6-bqrc-puhs Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would allow limited reads and writes outside of arrays in TFLite. This exploits missing validation in the conversion from sparse tensors to dense tensors. The fix is included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. Users are advised to upgrade as soon as possible. BIT-tensorflow-2022-23560
CVE-2022-23560
GHSA-4hvf-hxvg-f67v
PYSEC-2022-124
PYSEC-2022-69
VCID-qxqd-f1bw-y7h4 Tensorflow is an Open Source Machine Learning Framework. The implementation of `ThreadPoolHandle` can be used to trigger a denial of service attack by allocating too much memory. This is because the `num_threads` argument is only checked to not be negative, but there is no upper bound on its value. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21732
CVE-2022-21732
GHSA-c582-c96p-r5cq
PYSEC-2022-111
PYSEC-2022-56
VCID-rsau-jvcr-uudd Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseTensorSliceDataset` has an undefined behavior: under certain condition it can be made to dereference a `nullptr` value. The 3 input arguments to `SparseTensorSliceDataset` represent a sparse tensor. However, there are some preconditions that these arguments must satisfy but these are not validated in the implementation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21736
CVE-2022-21736
GHSA-pfjj-m3jj-9jc9
PYSEC-2022-115
PYSEC-2022-60
VCID-ugta-nt2s-27fk Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorFlow can fail to specialize a type during shape inference. This case is covered by the `DCHECK` function however, `DCHECK` is a no-op in production builds and an assertion failure in debug builds. In the first case execution proceeds to the `ValueOrDie` line. This results in an assertion failure as `ret` contains an error `Status`, not a value. In the second case we also get a crash due to the assertion failure. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23572
CVE-2022-23572
GHSA-rww7-2gpw-fv6j
PYSEC-2022-136
PYSEC-2022-81
VCID-v2nf-1526-nkbp Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial of service via assertion failure by altering a `SavedModel` on disk such that `AttrDef`s of some operation are duplicated. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23565
CVE-2022-23565
GHSA-4v5p-v5h9-6xjx
PYSEC-2022-129
PYSEC-2022-74
VCID-vfgz-fss4-wbgu Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's `SpecializeType` which results in heap OOB read/write. Due to a typo, `arg` is initialized to the `i`th mutable argument in a loop where the loop index is `j`. Hence it is possible to assign to `arg` from outside the vector of arguments. Since this is a mutable proto value, it allows both read and write to outside of bounds data. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23574
CVE-2022-23574
GHSA-77gp-3h4r-6428
PYSEC-2022-138
PYSEC-2022-83
VCID-vgv7-xc3c-1fb3 Tensorflow is an Open Source Machine Learning Framework. When decoding a resource handle tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments. This allows attackers to cause denial of services in TensorFlow processes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23564
CVE-2022-23564
GHSA-8rcj-c8pj-v3m3
PYSEC-2022-128
PYSEC-2022-73
VCID-vnn5-y8ez-rub9 Tensorflow is an Open Source Machine Learning Framework. The implementation of `AddManySparseToTensorsMap` is vulnerable to an integer overflow which results in a `CHECK`-fail when building new `TensorShape` objects (so, an assert failure based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large `TensorShape` with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23568
CVE-2022-23568
GHSA-6445-fm66-fvq2
PYSEC-2022-132
PYSEC-2022-77
VCID-vpyd-he5n-b3a4 Tensorflow is an Open Source Machine Learning Framework. The implementation of `QuantizedMaxPool` has an undefined behavior where user controlled inputs can trigger a reference binding to null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21739
CVE-2022-21739
GHSA-3mw4-6rj6-74g5
PYSEC-2022-118
PYSEC-2022-63
VCID-vqxg-mnz4-13cg Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by a `DCHECK`. However, `DCHECK` is a no-op in production builds and an assertion failure in debug builds. In the first case execution proceeds to the dereferencing of the null pointer, whereas in the second case it results in a crash due to the assertion failure. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23570
CVE-2022-23570
GHSA-9p77-mmrw-69c7
PYSEC-2022-134
PYSEC-2022-79
VCID-x2t2-4sa6-qygs Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive under certain conditions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23561
CVE-2022-23561
GHSA-9c78-vcq7-7vxq
PYSEC-2022-125
PYSEC-2022-70
VCID-x5x3-2cyz-xbhe Tensorflow is an Open Source Machine Learning Framework. If a graph node is invalid, TensorFlow can leak memory in the implementation of `ImmutableExecutorState::Initialize`. Here, we set `item->kernel` to `nullptr` but it is a simple `OpKernel*` pointer so the memory that was previously allocated to it would leak. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-23578
CVE-2022-23578
GHSA-8r7c-3cm2-3h8f
PYSEC-2022-142
PYSEC-2022-87
VCID-xn72-z6kg-q7bp Integer Overflow or Wraparound in TensorFlow ### Impact The Grappler component of TensorFlow is vulnerable to a denial of service via `CHECK`-failure in constant folding for ; // ... } ``` The `output_prop` tensor has a shape that is controlled by user input and this can result in triggering one of the `CHECK`s in the `PartialTensorShape` constructor. This is an instance of TFSA-2021-198 . ### Patches We have patched the issue in GitHub commit be7b286d40bc68cb0b56f702186cc4837d508058 fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. ### For more information Please consult [our security guide] for more information regarding the security model and how to contact us with issues and questions. GHSA-wcv5-vrvr-3rx2
GMS-2022-50
GMS-2022-53
GMS-2022-56
VCID-y8ed-ynrx-37af Improper Validation of Integrity Check Value in TensorFlow The implementation of `tf.sparse.split` does not fully validate the input arguments. GHSA-43q8-3fv7-pr5x
GMS-2022-48
GMS-2022-51
GMS-2022-54
VCID-yvag-32h1-yfc5 Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` is vulnerable to a heap overflow. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. BIT-tensorflow-2022-21740
CVE-2022-21740
GHSA-44qp-9wwf-734r
PYSEC-2022-119
PYSEC-2022-64
VCID-yvef-kyv2-qbea NULL Pointer Dereference and Access of Uninitialized Pointer in TensorFlow ### Impact The code for boosted trees in TensorFlow is still missing validation. This allows malicious users to read and write outside of bounds of heap allocated data as well as trigger denial of service (via dereferencing `nullptr`s or via `CHECK`-failures). This follows after CVE-2021-41208 where these APIs were still vulnerable to multiple security issues. **Note**: Given that the boosted trees implementation in TensorFlow is unmaintained, it is recommend to no longer use these APIs. Instead, please use the downstream [TensorFlow Decision Forests] project which is newer and supports more features. These APIs are now deprecated in TensorFlow 2.8. We will remove TensorFlow's boosted trees APIs in subsequent releases. ### Patches We have patched the known issues in multiple GitHub commits. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. This should allow users to use existing boosted trees APIs for a while until they migrate to TensorFlow Decision Forests while guaranteeing that known vulnerabilities are fixed. ### For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. ### Attribution These vulnerabilities have been reported by Yu Tian of Qihoo 360 AIVul Team and Faysal Hossain Shezan from University of Virginia. Some of the issues have been discovered internally after a careful audit of the APIs. GHSA-h6gw-r52c-724r
GMS-2022-49
GMS-2022-52
GMS-2022-55

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-01T08:11:09.420327+00:00 GitLab Importer Affected by VCID-6nyr-2edx-5qg6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-33976.yml 38.6.0
2026-06-01T07:22:09.421331+00:00 GitLab Importer Affected by VCID-gecu-uvpb-6yak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25661.yml 38.6.0
2026-06-01T07:21:51.576215+00:00 GitLab Importer Affected by VCID-f58d-1zga-jkf2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25663.yml 38.6.0
2026-06-01T07:21:50.746626+00:00 GitLab Importer Affected by VCID-djkj-bbaq-6kdr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25674.yml 38.6.0
2026-06-01T07:21:48.513920+00:00 GitLab Importer Affected by VCID-uxg4-9qfy-tbg6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25801.yml 38.6.0
2026-06-01T07:21:43.930582+00:00 GitLab Importer Affected by VCID-6cr3-ywr5-f7e6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25668.yml 38.6.0
2026-06-01T07:21:42.158331+00:00 GitLab Importer Affected by VCID-sxk5-athp-f7f1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25672.yml 38.6.0
2026-06-01T07:21:41.717749+00:00 GitLab Importer Affected by VCID-ayew-3cca-tyhz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25676.yml 38.6.0
2026-06-01T07:21:40.124195+00:00 GitLab Importer Affected by VCID-hdyy-j28t-wyc1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25664.yml 38.6.0
2026-06-01T07:21:38.991620+00:00 GitLab Importer Affected by VCID-8dhx-4a17-rbcj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25670.yml 38.6.0
2026-06-01T07:21:38.563272+00:00 GitLab Importer Affected by VCID-s8hv-3hsb-mfca https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-27579.yml 38.6.0
2026-06-01T07:21:38.047071+00:00 GitLab Importer Affected by VCID-u133-f98p-zqec https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25675.yml 38.6.0
2026-06-01T07:21:35.687520+00:00 GitLab Importer Affected by VCID-3yjn-h25c-v3gb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25667.yml 38.6.0
2026-06-01T07:21:32.867438+00:00 GitLab Importer Affected by VCID-2vyy-ktxf-y7hj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25666.yml 38.6.0
2026-06-01T07:21:32.425941+00:00 GitLab Importer Affected by VCID-dx1v-hfa1-xfg6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25665.yml 38.6.0
2026-06-01T07:21:31.345575+00:00 GitLab Importer Affected by VCID-gpta-cf34-vkfe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25659.yml 38.6.0
2026-06-01T07:21:30.263333+00:00 GitLab Importer Affected by VCID-uwq2-a5hb-9fhd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25658.yml 38.6.0
2026-06-01T07:21:29.829085+00:00 GitLab Importer Affected by VCID-r6tc-xmds-nyhv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25671.yml 38.6.0
2026-06-01T07:21:29.387230+00:00 GitLab Importer Affected by VCID-dbu5-btf9-2bee https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25660.yml 38.6.0
2026-06-01T07:21:28.274388+00:00 GitLab Importer Affected by VCID-d6hn-ppha-buc1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25669.yml 38.6.0
2026-06-01T07:21:27.844994+00:00 GitLab Importer Affected by VCID-9686-ufak-6ufd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25673.yml 38.6.0
2026-06-01T07:21:27.050332+00:00 GitLab Importer Affected by VCID-dgbb-1rft-7kdr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2023-25662.yml 38.6.0
2026-06-01T07:11:31.067147+00:00 GitLab Importer Affected by VCID-svbx-mnnb-eqbg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41880.yml 38.6.0
2026-06-01T07:11:19.672621+00:00 GitLab Importer Affected by VCID-6apy-b5ev-hkcj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41893.yml 38.6.0
2026-06-01T07:11:19.243505+00:00 GitLab Importer Affected by VCID-xp3m-ntp9-6bf4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41909.yml 38.6.0
2026-06-01T07:11:17.865476+00:00 GitLab Importer Affected by VCID-3erq-zcrk-qqaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41900.yml 38.6.0
2026-06-01T07:11:16.576665+00:00 GitLab Importer Affected by VCID-3s87-vf5k-cycp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41895.yml 38.6.0
2026-06-01T07:11:15.222012+00:00 GitLab Importer Affected by VCID-yvdh-xkxd-uyb2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41888.yml 38.6.0
2026-06-01T07:11:14.789839+00:00 GitLab Importer Affected by VCID-zd9x-yen4-pkdf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41884.yml 38.6.0
2026-06-01T07:11:12.785360+00:00 GitLab Importer Affected by VCID-5f52-bwtt-m3hn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41889.yml 38.6.0
2026-06-01T07:11:11.630262+00:00 GitLab Importer Affected by VCID-3zd4-d2hc-87at https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41890.yml 38.6.0
2026-06-01T07:11:10.533618+00:00 GitLab Importer Affected by VCID-3esk-gwz9-wfa4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41898.yml 38.6.0
2026-06-01T07:11:10.091390+00:00 GitLab Importer Affected by VCID-5m3b-x2b2-nfer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41886.yml 38.6.0
2026-06-01T07:11:09.582464+00:00 GitLab Importer Affected by VCID-bby1-jzms-6fgm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41908.yml 38.6.0
2026-06-01T07:11:08.291597+00:00 GitLab Importer Affected by VCID-dk2p-s22p-hbd8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41891.yml 38.6.0
2026-06-01T07:11:07.863358+00:00 GitLab Importer Affected by VCID-rzxq-vcmu-m7h5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41897.yml 38.6.0
2026-06-01T07:11:06.537366+00:00 GitLab Importer Affected by VCID-7guk-jpt3-eka8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41899.yml 38.6.0
2026-06-01T07:11:03.752606+00:00 GitLab Importer Affected by VCID-5qwh-rm2h-ekc7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41901.yml 38.6.0
2026-06-01T07:11:01.836545+00:00 GitLab Importer Affected by VCID-vbq8-42vx-b3hz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41907.yml 38.6.0
2026-06-01T07:11:01.303573+00:00 GitLab Importer Affected by VCID-zts1-n99c-cuh1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41911.yml 38.6.0
2026-06-01T07:11:00.087865+00:00 GitLab Importer Affected by VCID-ux3x-2756-n3av https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41885.yml 38.6.0
2026-06-01T07:10:58.870220+00:00 GitLab Importer Affected by VCID-77cw-2wuq-nued https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41887.yml 38.6.0
2026-06-01T07:10:53.704379+00:00 GitLab Importer Affected by VCID-1vxc-sbk4-77ef https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-41896.yml 38.6.0
2026-06-01T07:04:16.917103+00:00 GitLab Importer Affected by VCID-ztrz-qnwj-2fhd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35988.yml 38.6.0
2026-06-01T07:04:15.446234+00:00 GitLab Importer Affected by VCID-z6dc-pprc-buar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35966.yml 38.6.0
2026-06-01T07:04:14.503825+00:00 GitLab Importer Affected by VCID-1w3g-z5ja-q7cr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35960.yml 38.6.0
2026-06-01T07:04:14.121558+00:00 GitLab Importer Affected by VCID-7cu6-jt1f-q7hq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36011.yml 38.6.0
2026-06-01T07:04:13.755119+00:00 GitLab Importer Affected by VCID-ebu7-ts8t-43br https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35994.yml 38.6.0
2026-06-01T07:04:13.393101+00:00 GitLab Importer Affected by VCID-8dwk-hykt-93a5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36012.yml 38.6.0
2026-06-01T07:04:12.213870+00:00 GitLab Importer Affected by VCID-x1r9-72db-xqf6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36014.yml 38.6.0
2026-06-01T07:04:10.848044+00:00 GitLab Importer Affected by VCID-32uz-pmsu-dycn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35996.yml 38.6.0
2026-06-01T07:04:09.887947+00:00 GitLab Importer Affected by VCID-4sj6-vagv-2qe4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35969.yml 38.6.0
2026-06-01T07:04:09.219853+00:00 GitLab Importer Affected by VCID-gnns-f4aa-wuas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35972.yml 38.6.0
2026-06-01T07:04:07.400858+00:00 GitLab Importer Affected by VCID-djxs-vpxa-5bav https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36005.yml 38.6.0
2026-06-01T07:04:06.575482+00:00 GitLab Importer Affected by VCID-etu4-tnze-h3ag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35935.yml 38.6.0
2026-06-01T07:04:05.059711+00:00 GitLab Importer Affected by VCID-bjrr-3t28-rqgp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35983.yml 38.6.0
2026-06-01T07:04:03.456241+00:00 GitLab Importer Affected by VCID-v6cz-tyns-73br https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35937.yml 38.6.0
2026-06-01T07:04:01.860735+00:00 GitLab Importer Affected by VCID-nekm-7jcz-a3au https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36002.yml 38.6.0
2026-06-01T07:04:01.484224+00:00 GitLab Importer Affected by VCID-fr8d-65tt-a7bw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35939.yml 38.6.0
2026-06-01T07:03:58.913115+00:00 GitLab Importer Affected by VCID-3dun-j9ep-3ugk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36018.yml 38.6.0
2026-06-01T07:03:57.814405+00:00 GitLab Importer Affected by VCID-62y1-pd1b-vqhr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36017.yml 38.6.0
2026-06-01T07:03:57.430957+00:00 GitLab Importer Affected by VCID-nymb-futt-vqgf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35941.yml 38.6.0
2026-06-01T07:03:57.052526+00:00 GitLab Importer Affected by VCID-sb8m-6jmx-bkh4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35940.yml 38.6.0
2026-06-01T07:03:55.974911+00:00 GitLab Importer Affected by VCID-q2n9-eckv-jubc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35964.yml 38.6.0
2026-06-01T07:03:55.587912+00:00 GitLab Importer Affected by VCID-nwcb-zuc2-hudk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35968.yml 38.6.0
2026-06-01T07:03:52.825414+00:00 GitLab Importer Affected by VCID-4tyf-xfhm-d3cm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35963.yml 38.6.0
2026-06-01T07:03:50.849764+00:00 GitLab Importer Affected by VCID-unq7-3j4j-q3ew https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35959.yml 38.6.0
2026-06-01T07:03:46.996859+00:00 GitLab Importer Affected by VCID-15h4-876j-3bdz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35970.yml 38.6.0
2026-06-01T07:03:46.623427+00:00 GitLab Importer Affected by VCID-jmr2-tp5q-6qau https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35973.yml 38.6.0
2026-06-01T07:03:45.964678+00:00 GitLab Importer Affected by VCID-zc6k-2kds-afht https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35971.yml 38.6.0
2026-06-01T07:03:45.602514+00:00 GitLab Importer Affected by VCID-ss5q-9rxf-pygf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35992.yml 38.6.0
2026-06-01T07:03:45.219164+00:00 GitLab Importer Affected by VCID-y5s1-jyr5-eqfa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35989.yml 38.6.0
2026-06-01T07:03:39.287662+00:00 GitLab Importer Affected by VCID-kdhk-ygud-9bft https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35979.yml 38.6.0
2026-06-01T07:03:38.910815+00:00 GitLab Importer Affected by VCID-kjwx-6qbk-37ak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35981.yml 38.6.0
2026-06-01T07:03:38.534928+00:00 GitLab Importer Affected by VCID-4mky-qp2e-vbhg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36001.yml 38.6.0
2026-06-01T07:03:38.159712+00:00 GitLab Importer Affected by VCID-wm5z-8hpe-1ug6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36027.yml 38.6.0
2026-06-01T07:03:37.797143+00:00 GitLab Importer Affected by VCID-e7nb-5swt-r3c9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36000.yml 38.6.0
2026-06-01T07:03:34.558783+00:00 GitLab Importer Affected by VCID-hjd9-vujt-g7d2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36004.yml 38.6.0
2026-06-01T07:03:33.618850+00:00 GitLab Importer Affected by VCID-2311-hknw-2ubh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35974.yml 38.6.0
2026-06-01T07:03:32.589611+00:00 GitLab Importer Affected by VCID-gqh9-w7d2-r7ap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35952.yml 38.6.0
2026-06-01T07:03:32.220638+00:00 GitLab Importer Affected by VCID-7nkk-5pdm-uyck https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35982.yml 38.6.0
2026-06-01T07:03:31.861793+00:00 GitLab Importer Affected by VCID-y9yr-d3rq-97dq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35934.yml 38.6.0
2026-06-01T07:03:31.498550+00:00 GitLab Importer Affected by VCID-hdth-hp7r-ebfs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35987.yml 38.6.0
2026-06-01T07:03:31.122473+00:00 GitLab Importer Affected by VCID-b9p4-ta3s-wbeu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36013.yml 38.6.0
2026-06-01T07:03:30.090148+00:00 GitLab Importer Affected by VCID-ah8y-bmdk-5khm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35995.yml 38.6.0
2026-06-01T07:03:27.587130+00:00 GitLab Importer Affected by VCID-3fd6-8rv4-8qh3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35997.yml 38.6.0
2026-06-01T07:03:22.002019+00:00 GitLab Importer Affected by VCID-zun3-rnh3-h3e7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35993.yml 38.6.0
2026-06-01T07:03:16.716934+00:00 GitLab Importer Affected by VCID-83t5-dg3c-5qa2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35967.yml 38.6.0
2026-06-01T07:03:15.777142+00:00 GitLab Importer Affected by VCID-re7v-rdvx-9bav https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36016.yml 38.6.0
2026-06-01T07:03:12.163978+00:00 GitLab Importer Affected by VCID-rsm8-1q5j-7yac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36026.yml 38.6.0
2026-06-01T07:03:10.595440+00:00 GitLab Importer Affected by VCID-9hzh-a72m-nya3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35984.yml 38.6.0
2026-06-01T07:03:06.039202+00:00 GitLab Importer Affected by VCID-z5zj-88jh-cked https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36015.yml 38.6.0
2026-06-01T07:03:02.101546+00:00 GitLab Importer Affected by VCID-mrjt-fjbf-gyeh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35990.yml 38.6.0
2026-06-01T07:02:59.538082+00:00 GitLab Importer Affected by VCID-uh53-ed93-cfhj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36003.yml 38.6.0
2026-06-01T07:02:58.611048+00:00 GitLab Importer Affected by VCID-m4j4-decm-tkb6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-36019.yml 38.6.0
2026-06-01T07:02:58.253604+00:00 GitLab Importer Affected by VCID-4xpd-4a11-k3b7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35985.yml 38.6.0
2026-06-01T07:02:57.738859+00:00 GitLab Importer Affected by VCID-degg-b7w4-jyg7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35991.yml 38.6.0
2026-06-01T07:02:57.367308+00:00 GitLab Importer Affected by VCID-21pb-qyv3-27cj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35999.yml 38.6.0
2026-06-01T07:02:46.101483+00:00 GitLab Importer Affected by VCID-f8ut-vanr-1qbz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-35965.yml 38.6.0
2026-06-01T06:55:18.986280+00:00 GitLab Importer Affected by VCID-8zqb-tqfq-7ud7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29199.yml 38.6.0
2026-06-01T06:55:02.395448+00:00 GitLab Importer Affected by VCID-1hbp-9n5x-tyda https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29211.yml 38.6.0
2026-06-01T06:54:01.863564+00:00 GitLab Importer Affected by VCID-g7ud-1f9c-u7bn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29212.yml 38.6.0
2026-06-01T06:53:51.554606+00:00 GitLab Importer Affected by VCID-2tx7-szke-f7d8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29197.yml 38.6.0
2026-06-01T06:53:31.465002+00:00 GitLab Importer Affected by VCID-yx57-74vr-rfes https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29195.yml 38.6.0
2026-06-01T06:52:06.660473+00:00 GitLab Importer Affected by VCID-41ax-nrcf-yygf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29205.yml 38.6.0
2026-06-01T06:51:57.782954+00:00 GitLab Importer Affected by VCID-g5zp-g143-a3hk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29202.yml 38.6.0
2026-06-01T06:51:24.738945+00:00 GitLab Importer Affected by VCID-mzvs-ne4v-4qh7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29213.yml 38.6.0
2026-06-01T06:51:20.777450+00:00 GitLab Importer Affected by VCID-bn6z-c98v-n7bf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29203.yml 38.6.0
2026-06-01T06:50:47.554118+00:00 GitLab Importer Affected by VCID-4fcy-hbcs-cuan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29198.yml 38.6.0
2026-06-01T06:50:30.040916+00:00 GitLab Importer Affected by VCID-zw94-ns7h-6qg3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29193.yml 38.6.0
2026-06-01T06:50:28.671969+00:00 GitLab Importer Affected by VCID-b4hf-5gqs-yfbw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29206.yml 38.6.0
2026-06-01T06:50:25.178686+00:00 GitLab Importer Affected by VCID-rgug-8jmj-e7hw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29200.yml 38.6.0
2026-06-01T06:50:14.796219+00:00 GitLab Importer Affected by VCID-gh9u-ufcn-6khx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29194.yml 38.6.0
2026-06-01T06:50:13.907352+00:00 GitLab Importer Affected by VCID-sbpr-dnvt-x7eu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29201.yml 38.6.0
2026-06-01T06:49:56.527213+00:00 GitLab Importer Affected by VCID-s3fs-8v2b-zqem https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29207.yml 38.6.0
2026-06-01T06:49:40.983451+00:00 GitLab Importer Affected by VCID-d1hw-1fdb-kfhq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29209.yml 38.6.0
2026-06-01T06:49:36.504577+00:00 GitLab Importer Affected by VCID-62er-23uz-6qgu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29192.yml 38.6.0
2026-06-01T06:49:07.676426+00:00 GitLab Importer Affected by VCID-ww95-y388-3ben https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29196.yml 38.6.0
2026-06-01T06:49:00.344943+00:00 GitLab Importer Affected by VCID-k3rw-xwzv-1uer https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29216.yml 38.6.0
2026-06-01T06:48:55.818517+00:00 GitLab Importer Affected by VCID-exym-4mq2-rkbj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29204.yml 38.6.0
2026-06-01T06:48:22.177200+00:00 GitLab Importer Affected by VCID-wfh9-ew6v-nyhy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29191.yml 38.6.0
2026-06-01T06:47:40.022720+00:00 GitLab Importer Affected by VCID-jg5r-hv3s-kuh3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-29208.yml 38.6.0
2026-06-01T06:29:06.993401+00:00 GitLab Importer Affected by VCID-rt4b-xxm6-xubs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23590.yml 38.6.0
2026-05-31T11:23:39.153621+00:00 GithubOSV Importer Fixing VCID-d3dc-su6w-s3ag https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-23hm-7w47-xw72/GHSA-23hm-7w47-xw72.json 38.6.0
2026-05-31T11:23:37.151822+00:00 GithubOSV Importer Fixing VCID-145d-k5w3-tfgz https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-rrx2-r989-2c43/GHSA-rrx2-r989-2c43.json 38.6.0
2026-05-31T11:23:33.025298+00:00 GithubOSV Importer Fixing VCID-11qd-d7c7-sbdm https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-m4hf-j54p-p353/GHSA-m4hf-j54p-p353.json 38.6.0
2026-05-31T11:23:31.407715+00:00 GithubOSV Importer Fixing VCID-x5x3-2cyz-xbhe https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-8r7c-3cm2-3h8f/GHSA-8r7c-3cm2-3h8f.json 38.6.0
2026-05-31T11:23:29.715869+00:00 GithubOSV Importer Fixing VCID-x2t2-4sa6-qygs https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-9c78-vcq7-7vxq/GHSA-9c78-vcq7-7vxq.json 38.6.0
2026-05-31T11:23:28.802624+00:00 GithubOSV Importer Fixing VCID-vnn5-y8ez-rub9 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-6445-fm66-fvq2/GHSA-6445-fm66-fvq2.json 38.6.0
2026-05-31T11:23:27.326548+00:00 GithubOSV Importer Fixing VCID-6888-uhtp-8ub6 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-f2vv-v9cg-qhh7/GHSA-f2vv-v9cg-qhh7.json 38.6.0
2026-05-31T11:23:26.703063+00:00 GithubOSV Importer Fixing VCID-6gnj-az99-h7b4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-87v6-crgm-2gfj/GHSA-87v6-crgm-2gfj.json 38.6.0
2026-05-31T11:23:26.100012+00:00 GithubOSV Importer Fixing VCID-m4na-tgrp-d7fk https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-wm93-f238-7v37/GHSA-wm93-f238-7v37.json 38.6.0
2026-05-31T11:23:24.637863+00:00 GithubOSV Importer Fixing VCID-ky4u-eny7-33fy https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-34f9-hjfq-rr8j/GHSA-34f9-hjfq-rr8j.json 38.6.0
2026-05-31T11:23:23.630987+00:00 GithubOSV Importer Fixing VCID-gg98-zkw8-5ben https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-v3f7-j968-4h5f/GHSA-v3f7-j968-4h5f.json 38.6.0
2026-05-31T11:23:21.656513+00:00 GithubOSV Importer Fixing VCID-ev23-kazv-nkas https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-c94w-c95p-phf8/GHSA-c94w-c95p-phf8.json 38.6.0
2026-05-31T11:23:19.012426+00:00 GithubOSV Importer Fixing VCID-q4zv-syab-bbh8 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-9gwq-6cwj-47h3/GHSA-9gwq-6cwj-47h3.json 38.6.0
2026-05-31T11:23:17.030509+00:00 GithubOSV Importer Fixing VCID-vgv7-xc3c-1fb3 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-8rcj-c8pj-v3m3/GHSA-8rcj-c8pj-v3m3.json 38.6.0
2026-05-31T11:23:15.836586+00:00 GithubOSV Importer Fixing VCID-qxqd-f1bw-y7h4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-c582-c96p-r5cq/GHSA-c582-c96p-r5cq.json 38.6.0
2026-05-31T11:23:14.902759+00:00 GithubOSV Importer Fixing VCID-pe9p-a7nn-8bhj https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-4j82-5ccr-4r8v/GHSA-4j82-5ccr-4r8v.json 38.6.0
2026-05-31T11:23:11.720974+00:00 GithubOSV Importer Fixing VCID-eyqx-7k24-zfhq https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-x4qx-4fjv-hmw6/GHSA-x4qx-4fjv-hmw6.json 38.6.0
2026-05-31T11:23:11.031556+00:00 GithubOSV Importer Fixing VCID-ngkq-s26c-qkfj https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-9px9-73fg-3fqp/GHSA-9px9-73fg-3fqp.json 38.6.0
2026-05-31T11:23:10.296613+00:00 GithubOSV Importer Fixing VCID-97cs-4kx3-37gm https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-98j8-c9q4-r38g/GHSA-98j8-c9q4-r38g.json 38.6.0
2026-05-31T11:23:09.513956+00:00 GithubOSV Importer Fixing VCID-ev84-gxjn-6bf1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-c6fh-56w7-fvjw/GHSA-c6fh-56w7-fvjw.json 38.6.0
2026-05-31T11:23:07.732386+00:00 GithubOSV Importer Fixing VCID-vfgz-fss4-wbgu https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-77gp-3h4r-6428/GHSA-77gp-3h4r-6428.json 38.6.0
2026-05-31T11:23:06.983363+00:00 GithubOSV Importer Fixing VCID-y8ed-ynrx-37af https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-43q8-3fv7-pr5x/GHSA-43q8-3fv7-pr5x.json 38.6.0
2026-05-31T11:23:04.639263+00:00 GithubOSV Importer Fixing VCID-g8er-52ns-j7b1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-6gmv-pjp9-p8w8/GHSA-6gmv-pjp9-p8w8.json 38.6.0
2026-05-31T11:23:03.143987+00:00 GithubOSV Importer Fixing VCID-egc6-6pwr-fyej https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-8cxv-76p7-jxwr/GHSA-8cxv-76p7-jxwr.json 38.6.0
2026-05-31T11:23:02.275401+00:00 GithubOSV Importer Fixing VCID-fggx-3rzd-8kf5 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-fq6p-6334-8gr4/GHSA-fq6p-6334-8gr4.json 38.6.0
2026-05-31T11:23:01.562798+00:00 GithubOSV Importer Fixing VCID-15nt-6tff-k7gb https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-8jj7-5vxc-pg2q/GHSA-8jj7-5vxc-pg2q.json 38.6.0
2026-05-31T11:22:59.939496+00:00 GithubOSV Importer Fixing VCID-hujj-6vv2-u3c2 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-gjqc-q9g6-q2j3/GHSA-gjqc-q9g6-q2j3.json 38.6.0
2026-05-31T11:22:59.064058+00:00 GithubOSV Importer Fixing VCID-ugta-nt2s-27fk https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-rww7-2gpw-fv6j/GHSA-rww7-2gpw-fv6j.json 38.6.0
2026-05-31T11:22:58.284328+00:00 GithubOSV Importer Fixing VCID-vpyd-he5n-b3a4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-3mw4-6rj6-74g5/GHSA-3mw4-6rj6-74g5.json 38.6.0
2026-05-31T11:22:56.773029+00:00 GithubOSV Importer Fixing VCID-g8ts-ghhv-33e3 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-627q-g293-49q7/GHSA-627q-g293-49q7.json 38.6.0
2026-05-31T11:22:56.153001+00:00 GithubOSV Importer Fixing VCID-83pe-ztey-dbf4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-qj5r-f9mv-rffh/GHSA-qj5r-f9mv-rffh.json 38.6.0
2026-05-31T11:22:55.408914+00:00 GithubOSV Importer Fixing VCID-ccv1-pgda-r7ba https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-5qw5-89mw-wcg2/GHSA-5qw5-89mw-wcg2.json 38.6.0
2026-05-31T11:22:54.208720+00:00 GithubOSV Importer Fixing VCID-3g5a-5csn-h3d9 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-fx5c-h9f6-rv7c/GHSA-fx5c-h9f6-rv7c.json 38.6.0
2026-05-31T11:22:53.420699+00:00 GithubOSV Importer Fixing VCID-3czq-3twf-skcg https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-q85f-69q7-55h2/GHSA-q85f-69q7-55h2.json 38.6.0
2026-05-31T11:22:51.872718+00:00 GithubOSV Importer Fixing VCID-f25m-udat-n3fd https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-qx3f-p745-w4hr/GHSA-qx3f-p745-w4hr.json 38.6.0
2026-05-31T11:22:49.545579+00:00 GithubOSV Importer Fixing VCID-466y-e26r-rka4 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-fpcp-9h7m-ffpx/GHSA-fpcp-9h7m-ffpx.json 38.6.0
2026-05-31T11:22:48.949674+00:00 GithubOSV Importer Fixing VCID-cwvm-wntu-tfck https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-5f2r-qp73-37mr/GHSA-5f2r-qp73-37mr.json 38.6.0
2026-05-31T11:22:47.251059+00:00 GithubOSV Importer Fixing VCID-yvef-kyv2-qbea https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-h6gw-r52c-724r/GHSA-h6gw-r52c-724r.json 38.6.0
2026-05-31T11:22:46.591474+00:00 GithubOSV Importer Fixing VCID-jdud-ufqp-4yg5 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-247x-2f9f-5wp7/GHSA-247x-2f9f-5wp7.json 38.6.0
2026-05-31T11:22:41.751624+00:00 GithubOSV Importer Fixing VCID-9arh-a8wj-wka6 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-gcvh-66ff-4mwm/GHSA-gcvh-66ff-4mwm.json 38.6.0
2026-05-31T11:22:40.812218+00:00 GithubOSV Importer Fixing VCID-5tpp-sf62-zycs https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-wc4g-r73w-x8mm/GHSA-wc4g-r73w-x8mm.json 38.6.0
2026-05-31T11:22:40.137339+00:00 GithubOSV Importer Fixing VCID-n62z-1akp-ebck https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-24x4-6qmh-88qg/GHSA-24x4-6qmh-88qg.json 38.6.0
2026-05-31T11:22:39.549476+00:00 GithubOSV Importer Fixing VCID-39ck-bm9t-kqhs https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-gf2j-f278-xh4v/GHSA-gf2j-f278-xh4v.json 38.6.0
2026-05-31T11:22:36.925451+00:00 GithubOSV Importer Fixing VCID-vqxg-mnz4-13cg https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-9p77-mmrw-69c7/GHSA-9p77-mmrw-69c7.json 38.6.0
2026-05-31T11:22:36.281115+00:00 GithubOSV Importer Fixing VCID-1ah5-hm7a-ykep https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-vjg4-v33c-ggc4/GHSA-vjg4-v33c-ggc4.json 38.6.0
2026-05-31T11:22:35.155282+00:00 GithubOSV Importer Fixing VCID-mtqg-yga8-eqeu https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-fq86-3f29-px2c/GHSA-fq86-3f29-px2c.json 38.6.0
2026-05-31T11:22:33.876869+00:00 GithubOSV Importer Fixing VCID-xn72-z6kg-q7bp https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-wcv5-vrvr-3rx2/GHSA-wcv5-vrvr-3rx2.json 38.6.0
2026-05-31T11:22:32.601381+00:00 GithubOSV Importer Fixing VCID-yvag-32h1-yfc5 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-44qp-9wwf-734r/GHSA-44qp-9wwf-734r.json 38.6.0
2026-05-31T11:22:30.050387+00:00 GithubOSV Importer Fixing VCID-qgr6-bqrc-puhs https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-4hvf-hxvg-f67v/GHSA-4hvf-hxvg-f67v.json 38.6.0
2026-05-31T11:22:29.404254+00:00 GithubOSV Importer Fixing VCID-axj7-aq9m-rqdu https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-j3mj-fhpq-qqjj/GHSA-j3mj-fhpq-qqjj.json 38.6.0
2026-05-31T11:22:28.201134+00:00 GithubOSV Importer Fixing VCID-v2nf-1526-nkbp https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-4v5p-v5h9-6xjx/GHSA-4v5p-v5h9-6xjx.json 38.6.0
2026-05-31T11:22:27.646945+00:00 GithubOSV Importer Fixing VCID-en5f-xtha-cyhp https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-43jf-985q-588j/GHSA-43jf-985q-588j.json 38.6.0
2026-05-31T11:22:26.735862+00:00 GithubOSV Importer Fixing VCID-f3cx-k63z-7qde https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-98p5-x8x4-c9m5/GHSA-98p5-x8x4-c9m5.json 38.6.0
2026-05-31T11:22:26.050845+00:00 GithubOSV Importer Fixing VCID-rsau-jvcr-uudd https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-pfjj-m3jj-9jc9/GHSA-pfjj-m3jj-9jc9.json 38.6.0
2026-05-31T11:22:24.643707+00:00 GithubOSV Importer Fixing VCID-akmu-fas1-33h6 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-428x-9xc2-m8mj/GHSA-428x-9xc2-m8mj.json 38.6.0
2026-05-31T09:44:02.405863+00:00 PyPI Importer Fixing VCID-466y-e26r-rka4 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:44:02.280437+00:00 PyPI Importer Fixing VCID-x2t2-4sa6-qygs https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:44:02.154532+00:00 PyPI Importer Fixing VCID-q4zv-syab-bbh8 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:44:02.020636+00:00 PyPI Importer Fixing VCID-g8ts-ghhv-33e3 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:44:01.889268+00:00 PyPI Importer Fixing VCID-5tpp-sf62-zycs https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:44:01.762760+00:00 PyPI Importer Fixing VCID-ngkq-s26c-qkfj https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:44:01.631363+00:00 PyPI Importer Fixing VCID-cwvm-wntu-tfck https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:44:01.509001+00:00 PyPI Importer Fixing VCID-vfgz-fss4-wbgu https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:44:01.068116+00:00 PyPI Importer Fixing VCID-f3cx-k63z-7qde https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:44:00.650728+00:00 PyPI Importer Fixing VCID-3g5a-5csn-h3d9 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:44:00.530230+00:00 PyPI Importer Fixing VCID-x5x3-2cyz-xbhe https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:58.845348+00:00 PyPI Importer Fixing VCID-pe9p-a7nn-8bhj https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:58.441664+00:00 PyPI Importer Fixing VCID-qgr6-bqrc-puhs https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:58.315819+00:00 PyPI Importer Fixing VCID-ccv1-pgda-r7ba https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:57.381361+00:00 PyPI Importer Fixing VCID-hujj-6vv2-u3c2 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:56.451747+00:00 PyPI Importer Fixing VCID-15nt-6tff-k7gb https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:56.335521+00:00 PyPI Importer Fixing VCID-f25m-udat-n3fd https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:55.894147+00:00 PyPI Importer Fixing VCID-v2nf-1526-nkbp https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:55.495959+00:00 PyPI Importer Fixing VCID-ugta-nt2s-27fk https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:55.372050+00:00 PyPI Importer Fixing VCID-vgv7-xc3c-1fb3 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:55.016088+00:00 PyPI Importer Fixing VCID-egc6-6pwr-fyej https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:54.327889+00:00 PyPI Importer Fixing VCID-n62z-1akp-ebck https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:53.187211+00:00 PyPI Importer Fixing VCID-jdud-ufqp-4yg5 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:52.748911+00:00 PyPI Importer Fixing VCID-mtqg-yga8-eqeu https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:52.362525+00:00 PyPI Importer Fixing VCID-39ck-bm9t-kqhs https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:52.235767+00:00 PyPI Importer Fixing VCID-3czq-3twf-skcg https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:51.041426+00:00 PyPI Importer Fixing VCID-fggx-3rzd-8kf5 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:50.906294+00:00 PyPI Importer Affected by VCID-rt4b-xxm6-xubs https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:50.827376+00:00 PyPI Importer Fixing VCID-vqxg-mnz4-13cg https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:50.395264+00:00 PyPI Importer Fixing VCID-en5f-xtha-cyhp https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:50.276196+00:00 PyPI Importer Fixing VCID-m4na-tgrp-d7fk https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:49.668471+00:00 PyPI Importer Fixing VCID-axj7-aq9m-rqdu https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:49.548260+00:00 PyPI Importer Fixing VCID-ev23-kazv-nkas https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:49.431160+00:00 PyPI Importer Fixing VCID-yvag-32h1-yfc5 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:48.770762+00:00 PyPI Importer Fixing VCID-akmu-fas1-33h6 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:48.140324+00:00 PyPI Importer Fixing VCID-eyqx-7k24-zfhq https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:47.773208+00:00 PyPI Importer Fixing VCID-6888-uhtp-8ub6 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:47.660276+00:00 PyPI Importer Fixing VCID-vpyd-he5n-b3a4 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:47.296581+00:00 PyPI Importer Fixing VCID-83pe-ztey-dbf4 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:47.183654+00:00 PyPI Importer Fixing VCID-gg98-zkw8-5ben https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:46.813514+00:00 PyPI Importer Fixing VCID-ky4u-eny7-33fy https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:46.696760+00:00 PyPI Importer Fixing VCID-6gnj-az99-h7b4 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:46.311444+00:00 PyPI Importer Fixing VCID-9arh-a8wj-wka6 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:45.698446+00:00 PyPI Importer Fixing VCID-vnn5-y8ez-rub9 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:45.075120+00:00 PyPI Importer Fixing VCID-rsau-jvcr-uudd https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:44.698948+00:00 PyPI Importer Fixing VCID-97cs-4kx3-37gm https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:43.820189+00:00 PyPI Importer Fixing VCID-145d-k5w3-tfgz https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:43.691094+00:00 PyPI Importer Fixing VCID-11qd-d7c7-sbdm https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:43.574196+00:00 PyPI Importer Fixing VCID-qxqd-f1bw-y7h4 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:43.458725+00:00 PyPI Importer Fixing VCID-1ah5-hm7a-ykep https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:43.059676+00:00 PyPI Importer Fixing VCID-d3dc-su6w-s3ag https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:42.679125+00:00 PyPI Importer Fixing VCID-g8er-52ns-j7b1 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:43:42.556349+00:00 PyPI Importer Fixing VCID-ev84-gxjn-6bf1 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T00:55:09.426954+00:00 GHSA Importer Fixing VCID-hujj-6vv2-u3c2 https://github.com/advisories/GHSA-gjqc-q9g6-q2j3 38.6.0
2026-05-31T00:55:09.027224+00:00 GHSA Importer Fixing VCID-pe9p-a7nn-8bhj https://github.com/advisories/GHSA-4j82-5ccr-4r8v 38.6.0
2026-05-31T00:55:08.512866+00:00 GHSA Importer Fixing VCID-cwvm-wntu-tfck https://github.com/advisories/GHSA-5f2r-qp73-37mr 38.6.0
2026-05-31T00:55:08.098992+00:00 GHSA Importer Fixing VCID-x5x3-2cyz-xbhe https://github.com/advisories/GHSA-8r7c-3cm2-3h8f 38.6.0
2026-05-31T00:55:07.818909+00:00 GHSA Importer Fixing VCID-ev23-kazv-nkas https://github.com/advisories/GHSA-c94w-c95p-phf8 38.6.0
2026-05-31T00:55:07.288955+00:00 GHSA Importer Fixing VCID-m4na-tgrp-d7fk https://github.com/advisories/GHSA-wm93-f238-7v37 38.6.0
2026-05-31T00:55:07.067991+00:00 GHSA Importer Fixing VCID-egc6-6pwr-fyej https://github.com/advisories/GHSA-8cxv-76p7-jxwr 38.6.0
2026-05-31T00:55:05.982357+00:00 GHSA Importer Fixing VCID-6gnj-az99-h7b4 https://github.com/advisories/GHSA-87v6-crgm-2gfj 38.6.0
2026-05-31T00:55:05.882978+00:00 GHSA Importer Fixing VCID-9arh-a8wj-wka6 https://github.com/advisories/GHSA-gcvh-66ff-4mwm 38.6.0
2026-05-31T00:55:05.384903+00:00 GHSA Importer Fixing VCID-97cs-4kx3-37gm https://github.com/advisories/GHSA-98j8-c9q4-r38g 38.6.0
2026-05-31T00:55:04.631320+00:00 GHSA Importer Fixing VCID-qxqd-f1bw-y7h4 https://github.com/advisories/GHSA-c582-c96p-r5cq 38.6.0
2026-05-31T00:55:04.463310+00:00 GHSA Importer Fixing VCID-11qd-d7c7-sbdm https://github.com/advisories/GHSA-m4hf-j54p-p353 38.6.0
2026-05-31T00:55:04.003762+00:00 GHSA Importer Fixing VCID-ky4u-eny7-33fy https://github.com/advisories/GHSA-34f9-hjfq-rr8j 38.6.0
2026-05-31T00:55:03.677962+00:00 GHSA Importer Fixing VCID-gg98-zkw8-5ben https://github.com/advisories/GHSA-v3f7-j968-4h5f 38.6.0
2026-05-31T00:55:03.012696+00:00 GHSA Importer Fixing VCID-n62z-1akp-ebck https://github.com/advisories/GHSA-24x4-6qmh-88qg 38.6.0
2026-05-31T00:55:02.458348+00:00 GHSA Importer Fixing VCID-ccv1-pgda-r7ba https://github.com/advisories/GHSA-5qw5-89mw-wcg2 38.6.0
2026-05-31T00:55:02.194138+00:00 GHSA Importer Fixing VCID-vgv7-xc3c-1fb3 https://github.com/advisories/GHSA-8rcj-c8pj-v3m3 38.6.0
2026-05-31T00:55:01.729715+00:00 GHSA Importer Fixing VCID-5tpp-sf62-zycs https://github.com/advisories/GHSA-wc4g-r73w-x8mm 38.6.0
2026-05-31T00:55:01.347572+00:00 GHSA Importer Fixing VCID-f25m-udat-n3fd https://github.com/advisories/GHSA-qx3f-p745-w4hr 38.6.0
2026-05-31T00:55:00.920635+00:00 GHSA Importer Fixing VCID-x2t2-4sa6-qygs https://github.com/advisories/GHSA-9c78-vcq7-7vxq 38.6.0
2026-05-31T00:55:00.490249+00:00 GHSA Importer Fixing VCID-qgr6-bqrc-puhs https://github.com/advisories/GHSA-4hvf-hxvg-f67v 38.6.0
2026-05-31T00:55:00.035691+00:00 GHSA Importer Fixing VCID-f3cx-k63z-7qde https://github.com/advisories/GHSA-98p5-x8x4-c9m5 38.6.0
2026-05-31T00:54:59.685072+00:00 GHSA Importer Fixing VCID-q4zv-syab-bbh8 https://github.com/advisories/GHSA-9gwq-6cwj-47h3 38.6.0
2026-05-31T00:54:59.249596+00:00 GHSA Importer Fixing VCID-v2nf-1526-nkbp https://github.com/advisories/GHSA-4v5p-v5h9-6xjx 38.6.0
2026-05-31T00:54:58.747007+00:00 GHSA Importer Fixing VCID-39ck-bm9t-kqhs https://github.com/advisories/GHSA-gf2j-f278-xh4v 38.6.0
2026-05-31T00:54:58.280916+00:00 GHSA Importer Fixing VCID-akmu-fas1-33h6 https://github.com/advisories/GHSA-428x-9xc2-m8mj 38.6.0
2026-05-31T00:54:58.132315+00:00 GHSA Importer Fixing VCID-yvag-32h1-yfc5 https://github.com/advisories/GHSA-44qp-9wwf-734r 38.6.0
2026-05-31T00:54:57.506590+00:00 GHSA Importer Fixing VCID-vpyd-he5n-b3a4 https://github.com/advisories/GHSA-3mw4-6rj6-74g5 38.6.0
2026-05-31T00:54:57.070682+00:00 GHSA Importer Fixing VCID-eyqx-7k24-zfhq https://github.com/advisories/GHSA-x4qx-4fjv-hmw6 38.6.0
2026-05-31T00:54:56.867472+00:00 GHSA Importer Fixing VCID-6888-uhtp-8ub6 https://github.com/advisories/GHSA-f2vv-v9cg-qhh7 38.6.0
2026-05-31T00:54:56.568838+00:00 GHSA Importer Fixing VCID-rsau-jvcr-uudd https://github.com/advisories/GHSA-pfjj-m3jj-9jc9 38.6.0
2026-05-31T00:54:55.773281+00:00 GHSA Importer Fixing VCID-145d-k5w3-tfgz https://github.com/advisories/GHSA-rrx2-r989-2c43 38.6.0
2026-05-31T00:54:55.714746+00:00 GHSA Importer Fixing VCID-vnn5-y8ez-rub9 https://github.com/advisories/GHSA-6445-fm66-fvq2 38.6.0
2026-05-31T00:54:55.202069+00:00 GHSA Importer Fixing VCID-83pe-ztey-dbf4 https://github.com/advisories/GHSA-qj5r-f9mv-rffh 38.6.0
2026-05-31T00:54:54.829743+00:00 GHSA Importer Fixing VCID-yvef-kyv2-qbea https://github.com/advisories/GHSA-h6gw-r52c-724r 38.6.0
2026-05-31T00:54:54.401766+00:00 GHSA Importer Fixing VCID-y8ed-ynrx-37af https://github.com/advisories/GHSA-43q8-3fv7-pr5x 38.6.0
2026-05-31T00:54:54.055807+00:00 GHSA Importer Fixing VCID-xn72-z6kg-q7bp https://github.com/advisories/GHSA-wcv5-vrvr-3rx2 38.6.0
2026-05-31T00:54:53.826113+00:00 GHSA Importer Fixing VCID-vqxg-mnz4-13cg https://github.com/advisories/GHSA-9p77-mmrw-69c7 38.6.0
2026-05-31T00:54:53.185710+00:00 GHSA Importer Fixing VCID-466y-e26r-rka4 https://github.com/advisories/GHSA-fpcp-9h7m-ffpx 38.6.0
2026-05-31T00:54:52.439616+00:00 GHSA Importer Fixing VCID-jdud-ufqp-4yg5 https://github.com/advisories/GHSA-247x-2f9f-5wp7 38.6.0
2026-05-31T00:54:51.979850+00:00 GHSA Importer Fixing VCID-ngkq-s26c-qkfj https://github.com/advisories/GHSA-9px9-73fg-3fqp 38.6.0
2026-05-31T00:54:51.447445+00:00 GHSA Importer Fixing VCID-axj7-aq9m-rqdu https://github.com/advisories/GHSA-j3mj-fhpq-qqjj 38.6.0
2026-05-31T00:54:50.874320+00:00 GHSA Importer Fixing VCID-ugta-nt2s-27fk https://github.com/advisories/GHSA-rww7-2gpw-fv6j 38.6.0
2026-05-31T00:54:50.803555+00:00 GHSA Importer Fixing VCID-3g5a-5csn-h3d9 https://github.com/advisories/GHSA-fx5c-h9f6-rv7c 38.6.0
2026-05-31T00:54:50.101964+00:00 GHSA Importer Fixing VCID-15nt-6tff-k7gb https://github.com/advisories/GHSA-8jj7-5vxc-pg2q 38.6.0
2026-05-31T00:54:49.968726+00:00 GHSA Importer Fixing VCID-en5f-xtha-cyhp https://github.com/advisories/GHSA-43jf-985q-588j 38.6.0
2026-05-31T00:54:49.479413+00:00 GHSA Importer Fixing VCID-3czq-3twf-skcg https://github.com/advisories/GHSA-q85f-69q7-55h2 38.6.0
2026-05-31T00:54:48.935868+00:00 GHSA Importer Fixing VCID-fggx-3rzd-8kf5 https://github.com/advisories/GHSA-fq6p-6334-8gr4 38.6.0
2026-05-31T00:54:48.458268+00:00 GHSA Importer Fixing VCID-vfgz-fss4-wbgu https://github.com/advisories/GHSA-77gp-3h4r-6428 38.6.0
2026-05-31T00:54:42.870974+00:00 GHSA Importer Fixing VCID-1ah5-hm7a-ykep https://github.com/advisories/GHSA-vjg4-v33c-ggc4 38.6.0
2026-05-31T00:54:42.305995+00:00 GHSA Importer Fixing VCID-g8er-52ns-j7b1 https://github.com/advisories/GHSA-6gmv-pjp9-p8w8 38.6.0
2026-05-31T00:54:42.119512+00:00 GHSA Importer Fixing VCID-ev84-gxjn-6bf1 https://github.com/advisories/GHSA-c6fh-56w7-fvjw 38.6.0
2026-05-31T00:54:41.635047+00:00 GHSA Importer Fixing VCID-d3dc-su6w-s3ag https://github.com/advisories/GHSA-23hm-7w47-xw72 38.6.0
2026-05-31T00:54:39.110234+00:00 GHSA Importer Fixing VCID-g8ts-ghhv-33e3 https://github.com/advisories/GHSA-627q-g293-49q7 38.6.0
2026-05-31T00:54:38.812917+00:00 GHSA Importer Fixing VCID-mtqg-yga8-eqeu https://github.com/advisories/GHSA-fq86-3f29-px2c 38.6.0
2026-05-30T20:57:07.194973+00:00 GitLab Importer Fixing VCID-pe9p-a7nn-8bhj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23582.yml 38.6.0
2026-05-30T20:57:07.126972+00:00 GitLab Importer Fixing VCID-x5x3-2cyz-xbhe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23578.yml 38.6.0
2026-05-30T20:57:07.060133+00:00 GitLab Importer Fixing VCID-gg98-zkw8-5ben https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21725.yml 38.6.0
2026-05-30T20:57:06.993411+00:00 GitLab Importer Fixing VCID-ky4u-eny7-33fy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21729.yml 38.6.0
2026-05-30T20:57:06.757153+00:00 GitLab Importer Fixing VCID-cwvm-wntu-tfck https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23579.yml 38.6.0
2026-05-30T20:57:06.574417+00:00 GitLab Importer Fixing VCID-6gnj-az99-h7b4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21735.yml 38.6.0
2026-05-30T20:57:06.343754+00:00 GitLab Importer Fixing VCID-qxqd-f1bw-y7h4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21732.yml 38.6.0
2026-05-30T20:57:04.931464+00:00 GitLab Importer Fixing VCID-m4na-tgrp-d7fk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23576.yml 38.6.0
2026-05-30T20:57:04.854970+00:00 GitLab Importer Fixing VCID-egc6-6pwr-fyej https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23577.yml 38.6.0
2026-05-30T20:57:04.000604+00:00 GitLab Importer Fixing VCID-11qd-d7c7-sbdm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21731.yml 38.6.0
2026-05-30T20:57:03.728706+00:00 GitLab Importer Fixing VCID-9arh-a8wj-wka6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21734.yml 38.6.0
2026-05-30T20:57:03.649645+00:00 GitLab Importer Fixing VCID-97cs-4kx3-37gm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21733.yml 38.6.0
2026-05-30T20:57:03.521262+00:00 GitLab Importer Fixing VCID-hujj-6vv2-u3c2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23583.yml 38.6.0
2026-05-30T20:57:02.623774+00:00 GitLab Importer Fixing VCID-ev23-kazv-nkas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23575.yml 38.6.0
2026-05-30T20:57:02.472562+00:00 GitLab Importer Fixing VCID-x2t2-4sa6-qygs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23561.yml 38.6.0
2026-05-30T20:57:02.267564+00:00 GitLab Importer Fixing VCID-3g5a-5csn-h3d9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23588.yml 38.6.0
2026-05-30T20:57:02.191007+00:00 GitLab Importer Fixing VCID-3czq-3twf-skcg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23573.yml 38.6.0
2026-05-30T20:57:01.952096+00:00 GitLab Importer Fixing VCID-jdud-ufqp-4yg5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23591.yml 38.6.0
2026-05-30T20:57:01.882490+00:00 GitLab Importer Fixing VCID-vpyd-he5n-b3a4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21739.yml 38.6.0
2026-05-30T20:57:01.513837+00:00 GitLab Importer Fixing VCID-vgv7-xc3c-1fb3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23564.yml 38.6.0
2026-05-30T20:57:00.993178+00:00 GitLab Importer Fixing VCID-xn72-z6kg-q7bp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/GMS-2022-53.yml 38.6.0
2026-05-30T20:57:00.529657+00:00 GitLab Importer Fixing VCID-en5f-xtha-cyhp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23586.yml 38.6.0
2026-05-30T20:57:00.456899+00:00 GitLab Importer Fixing VCID-yvag-32h1-yfc5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21740.yml 38.6.0
2026-05-30T20:57:00.067121+00:00 GitLab Importer Fixing VCID-ev84-gxjn-6bf1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21727.yml 38.6.0
2026-05-30T20:57:00.001956+00:00 GitLab Importer Fixing VCID-fggx-3rzd-8kf5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23585.yml 38.6.0
2026-05-30T20:56:59.610646+00:00 GitLab Importer Fixing VCID-39ck-bm9t-kqhs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23557.yml 38.6.0
2026-05-30T20:56:58.860959+00:00 GitLab Importer Fixing VCID-5tpp-sf62-zycs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23563.yml 38.6.0
2026-05-30T20:56:58.728557+00:00 GitLab Importer Fixing VCID-466y-e26r-rka4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23595.yml 38.6.0
2026-05-30T20:56:57.599676+00:00 GitLab Importer Fixing VCID-15nt-6tff-k7gb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23587.yml 38.6.0
2026-05-30T20:56:57.414981+00:00 GitLab Importer Fixing VCID-vnn5-y8ez-rub9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23568.yml 38.6.0
2026-05-30T20:56:57.338366+00:00 GitLab Importer Fixing VCID-f25m-udat-n3fd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23562.yml 38.6.0
2026-05-30T20:56:57.151371+00:00 GitLab Importer Fixing VCID-rsau-jvcr-uudd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21736.yml 38.6.0
2026-05-30T20:56:56.794420+00:00 GitLab Importer Fixing VCID-y8ed-ynrx-37af https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/GMS-2022-51.yml 38.6.0
2026-05-30T20:56:56.658722+00:00 GitLab Importer Fixing VCID-6888-uhtp-8ub6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21737.yml 38.6.0
2026-05-30T20:56:56.582186+00:00 GitLab Importer Fixing VCID-83pe-ztey-dbf4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23569.yml 38.6.0
2026-05-30T20:56:56.513148+00:00 GitLab Importer Fixing VCID-eyqx-7k24-zfhq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21738.yml 38.6.0
2026-05-30T20:56:56.173125+00:00 GitLab Importer Fixing VCID-f3cx-k63z-7qde https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23559.yml 38.6.0
2026-05-30T20:56:55.780720+00:00 GitLab Importer Fixing VCID-akmu-fas1-33h6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21741.yml 38.6.0
2026-05-30T20:56:55.716104+00:00 GitLab Importer Fixing VCID-yvef-kyv2-qbea https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/GMS-2022-52.yml 38.6.0
2026-05-30T20:56:55.664217+00:00 GitLab Importer Fixing VCID-ccv1-pgda-r7ba https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23566.yml 38.6.0
2026-05-30T20:56:55.524030+00:00 GitLab Importer Fixing VCID-1ah5-hm7a-ykep https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21730.yml 38.6.0
2026-05-30T20:56:54.860664+00:00 GitLab Importer Fixing VCID-axj7-aq9m-rqdu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23571.yml 38.6.0
2026-05-30T20:56:54.556987+00:00 GitLab Importer Fixing VCID-ugta-nt2s-27fk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23572.yml 38.6.0
2026-05-30T20:56:54.322053+00:00 GitLab Importer Fixing VCID-n62z-1akp-ebck https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23584.yml 38.6.0
2026-05-30T20:56:54.084656+00:00 GitLab Importer Fixing VCID-ngkq-s26c-qkfj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23589.yml 38.6.0
2026-05-30T20:56:53.711902+00:00 GitLab Importer Fixing VCID-vfgz-fss4-wbgu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23574.yml 38.6.0
2026-05-30T20:56:53.285954+00:00 GitLab Importer Fixing VCID-q4zv-syab-bbh8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23558.yml 38.6.0
2026-05-30T20:56:53.162938+00:00 GitLab Importer Fixing VCID-vqxg-mnz4-13cg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23570.yml 38.6.0
2026-05-30T20:56:53.041073+00:00 GitLab Importer Fixing VCID-qgr6-bqrc-puhs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23560.yml 38.6.0
2026-05-30T20:56:52.819944+00:00 GitLab Importer Fixing VCID-d3dc-su6w-s3ag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21726.yml 38.6.0
2026-05-30T20:56:51.878404+00:00 GitLab Importer Fixing VCID-g8er-52ns-j7b1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-21728.yml 38.6.0
2026-05-30T20:56:51.683218+00:00 GitLab Importer Fixing VCID-145d-k5w3-tfgz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23567.yml 38.6.0
2026-05-30T20:56:51.540799+00:00 GitLab Importer Fixing VCID-v2nf-1526-nkbp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23565.yml 38.6.0
2026-05-30T20:56:49.655806+00:00 GitLab Importer Fixing VCID-mtqg-yga8-eqeu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23581.yml 38.6.0
2026-05-30T20:56:49.400909+00:00 GitLab Importer Fixing VCID-g8ts-ghhv-33e3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tensorflow-cpu/CVE-2022-23580.yml 38.6.0
2026-05-30T20:29:59.311382+00:00 Pypa Importer Fixing VCID-n62z-1akp-ebck https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-93.yaml 38.6.0
2026-05-30T20:29:59.097310+00:00 Pypa Importer Fixing VCID-vqxg-mnz4-13cg https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-79.yaml 38.6.0
2026-05-30T20:29:58.881970+00:00 Pypa Importer Fixing VCID-39ck-bm9t-kqhs https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-66.yaml 38.6.0
2026-05-30T20:29:58.177555+00:00 Pypa Importer Fixing VCID-axj7-aq9m-rqdu https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-80.yaml 38.6.0
2026-05-30T20:29:57.957631+00:00 Pypa Importer Fixing VCID-vfgz-fss4-wbgu https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-83.yaml 38.6.0
2026-05-30T20:29:57.240973+00:00 Pypa Importer Fixing VCID-5tpp-sf62-zycs https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-72.yaml 38.6.0
2026-05-30T20:29:57.017939+00:00 Pypa Importer Fixing VCID-pe9p-a7nn-8bhj https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-91.yaml 38.6.0
2026-05-30T20:29:56.303149+00:00 Pypa Importer Fixing VCID-v2nf-1526-nkbp https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-74.yaml 38.6.0
2026-05-30T20:29:56.078327+00:00 Pypa Importer Fixing VCID-ugta-nt2s-27fk https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-81.yaml 38.6.0
2026-05-30T20:29:55.860509+00:00 Pypa Importer Fixing VCID-en5f-xtha-cyhp https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-95.yaml 38.6.0
2026-05-30T20:29:54.642567+00:00 Pypa Importer Fixing VCID-ngkq-s26c-qkfj https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-98.yaml 38.6.0
2026-05-30T20:29:53.948493+00:00 Pypa Importer Fixing VCID-cwvm-wntu-tfck https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-88.yaml 38.6.0
2026-05-30T20:29:53.729518+00:00 Pypa Importer Fixing VCID-15nt-6tff-k7gb https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-96.yaml 38.6.0
2026-05-30T20:29:51.199568+00:00 Pypa Importer Fixing VCID-ev23-kazv-nkas https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-84.yaml 38.6.0
2026-05-30T20:29:50.967752+00:00 Pypa Importer Fixing VCID-3g5a-5csn-h3d9 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-97.yaml 38.6.0
2026-05-30T20:29:50.720088+00:00 Pypa Importer Affected by VCID-rt4b-xxm6-xubs https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-99.yaml 38.6.0
2026-05-30T20:29:50.066691+00:00 Pypa Importer Fixing VCID-egc6-6pwr-fyej https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-86.yaml 38.6.0
2026-05-30T20:29:49.848295+00:00 Pypa Importer Fixing VCID-466y-e26r-rka4 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-103.yaml 38.6.0
2026-05-30T20:29:49.622219+00:00 Pypa Importer Fixing VCID-f3cx-k63z-7qde https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-68.yaml 38.6.0
2026-05-30T20:29:47.940647+00:00 Pypa Importer Fixing VCID-jdud-ufqp-4yg5 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-100.yaml 38.6.0
2026-05-30T20:29:47.724410+00:00 Pypa Importer Fixing VCID-x5x3-2cyz-xbhe https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-87.yaml 38.6.0
2026-05-30T20:29:45.523669+00:00 Pypa Importer Fixing VCID-vgv7-xc3c-1fb3 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-73.yaml 38.6.0
2026-05-30T20:29:44.833828+00:00 Pypa Importer Fixing VCID-x2t2-4sa6-qygs https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-70.yaml 38.6.0
2026-05-30T20:29:44.567703+00:00 Pypa Importer Fixing VCID-m4na-tgrp-d7fk https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-85.yaml 38.6.0
2026-05-30T20:29:44.352687+00:00 Pypa Importer Fixing VCID-qgr6-bqrc-puhs https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-69.yaml 38.6.0
2026-05-30T20:29:44.130060+00:00 Pypa Importer Fixing VCID-hujj-6vv2-u3c2 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-92.yaml 38.6.0
2026-05-30T20:29:42.868746+00:00 Pypa Importer Fixing VCID-f25m-udat-n3fd https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-71.yaml 38.6.0
2026-05-30T20:29:41.652660+00:00 Pypa Importer Fixing VCID-g8ts-ghhv-33e3 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-89.yaml 38.6.0
2026-05-30T20:29:41.430256+00:00 Pypa Importer Fixing VCID-fggx-3rzd-8kf5 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-94.yaml 38.6.0
2026-05-30T20:29:40.185139+00:00 Pypa Importer Fixing VCID-q4zv-syab-bbh8 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-67.yaml 38.6.0
2026-05-30T20:29:39.949031+00:00 Pypa Importer Fixing VCID-3czq-3twf-skcg https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-82.yaml 38.6.0
2026-05-30T20:29:39.720816+00:00 Pypa Importer Fixing VCID-mtqg-yga8-eqeu https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-90.yaml 38.6.0
2026-05-30T20:29:38.954502+00:00 Pypa Importer Fixing VCID-ccv1-pgda-r7ba https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-75.yaml 38.6.0
2026-05-30T20:29:36.302620+00:00 Pypa Importer Fixing VCID-yvag-32h1-yfc5 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-64.yaml 38.6.0
2026-05-30T20:29:36.077097+00:00 Pypa Importer Fixing VCID-akmu-fas1-33h6 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-65.yaml 38.6.0
2026-05-30T20:29:35.348798+00:00 Pypa Importer Fixing VCID-6888-uhtp-8ub6 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-61.yaml 38.6.0
2026-05-30T20:29:34.097544+00:00 Pypa Importer Fixing VCID-vpyd-he5n-b3a4 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-63.yaml 38.6.0
2026-05-30T20:29:33.376555+00:00 Pypa Importer Fixing VCID-eyqx-7k24-zfhq https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-62.yaml 38.6.0
2026-05-30T20:29:33.139768+00:00 Pypa Importer Fixing VCID-ky4u-eny7-33fy https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-53.yaml 38.6.0
2026-05-30T20:29:32.419870+00:00 Pypa Importer Fixing VCID-83pe-ztey-dbf4 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-78.yaml 38.6.0
2026-05-30T20:29:32.207732+00:00 Pypa Importer Fixing VCID-gg98-zkw8-5ben https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-49.yaml 38.6.0
2026-05-30T20:29:30.535812+00:00 Pypa Importer Fixing VCID-9arh-a8wj-wka6 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-58.yaml 38.6.0
2026-05-30T20:29:29.800015+00:00 Pypa Importer Fixing VCID-6gnj-az99-h7b4 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-59.yaml 38.6.0
2026-05-30T20:29:29.078942+00:00 Pypa Importer Fixing VCID-vnn5-y8ez-rub9 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-77.yaml 38.6.0
2026-05-30T20:29:28.358013+00:00 Pypa Importer Fixing VCID-97cs-4kx3-37gm https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-57.yaml 38.6.0
2026-05-30T20:29:27.670956+00:00 Pypa Importer Fixing VCID-rsau-jvcr-uudd https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-60.yaml 38.6.0
2026-05-30T20:29:27.456731+00:00 Pypa Importer Fixing VCID-qxqd-f1bw-y7h4 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-56.yaml 38.6.0
2026-05-30T20:29:27.222556+00:00 Pypa Importer Fixing VCID-11qd-d7c7-sbdm https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-55.yaml 38.6.0
2026-05-30T20:29:26.992116+00:00 Pypa Importer Fixing VCID-145d-k5w3-tfgz https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-76.yaml 38.6.0
2026-05-30T20:29:24.828272+00:00 Pypa Importer Fixing VCID-g8er-52ns-j7b1 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-52.yaml 38.6.0
2026-05-30T20:29:23.172575+00:00 Pypa Importer Fixing VCID-1ah5-hm7a-ykep https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-54.yaml 38.6.0
2026-05-30T20:29:22.947857+00:00 Pypa Importer Fixing VCID-d3dc-su6w-s3ag https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-50.yaml 38.6.0
2026-05-30T20:29:22.729818+00:00 Pypa Importer Fixing VCID-ev84-gxjn-6bf1 https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2022-51.yaml 38.6.0