Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Advisories

Loading...
Moderate
GSA_kwCzR0hTQS04dzVnLTN3Y3YtOWcyas4AAv_l
Tensorflow vulnerable to Out-of-Bounds Read
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Low
GSA_kwCzR0hTQS1jcXZxLWZ2aHItdjZoY84AAv_Z
`CHECK` failure in `SobolSample` via missing validation
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Low
GSA_kwCzR0hTQS14ZjgzLXE3NjUteG02bc4AAv_Y
`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS1wZjM2LXI5YzYtaDk3as4AAv_H
Invalid char to bool conversion when printing a tensor
Ecosystems: pypi
Packages: tensorflow-cpu, tensorflow-gpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS1mcnFwLXdwODMtcWdnds4AAv_G
Heap overflow in `QuantizeAndDequantizeV2`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS1yang2LXY0NzQtMmNoOc4AAv_F
Segfault in `CompositeTensorVariantToComponents`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS1tdjc3LTlnMjgtY3dnM84AAv_E
`CHECK` fail via inputs in `PyFunc`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS0zNjh2LTd2MzItNTJmeM4AAv_D
Overflow in `ResizeNearestNeighborGrad`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
High
GSA_kwCzR0hTQS1jZzg4LXJwdnAtY2p2Nc4AAv_C
Out of bounds write in grappler in Tensorflow
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS1nOWZtLXI1bW0tcmY5Zs4AAv_B
`CHECK_EQ` fail via input in `SparseMatrixNNZ`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
High
GSA_kwCzR0hTQS14dndwLWg2anYtNzQ3Ms4AAv_A
FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS0yN3JjLTcyOGYteDV3Ms4AAv-_
`CHECK` fail via inputs in `SdcaOptimizer`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS1ocTdnLXd3d3AtcTQ2aM4AAv--
`CHECK` fail via inputs in `SparseFillEmptyRowsGrad`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS1mMnc4LWp3NDgtZnI3as4AAv-9
`FractionalMaxPoolGrad` Heap out of bounds read
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS1ybWcyLWY2OTgtd3EzNc4AAv-8
`tf.raw_ops.Mfcc` crashes
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS1ncTJqLWNyOTYtZ3ZxeM4AAv-2
`MirrorPadGrad` heap out of bounds read
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS02N3BmLTYyeHItcTM1bc4AAv-0
`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS02NnZxLTU0ZnEtNmp2ds4AAv-z
Segfault in `tf.raw_ops.TensorListConcat`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS1oMjQ2LWNnaDQtNzQ3Nc4AAv-y
`CHECK` fail in `BCast` overflow
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS14eGNqLXJocWctbTQ2Z84AAv-x
Segfault via invalid attributes in `pywrap_tfe_src.cc`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS02eDk5LWd2MnYtcTc2ds4AAv-w
FPE in `tf.image.generate_bounding_box_proposals`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS04ZnZ2LTQ2aHctdnBnM84AAv-v
Overflow in `tf.keras.losses.poisson`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS01NHBwLWM2cHAtN2ZweM4AAv-u
Overflow in `ImageProjectiveTransformV2`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS03NjJoLXZwdnctM3JjeM4AAv-t
Overflow in `FusedResizeAndPadConv2D`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS1qcTZ4LTk5aGotcTYzNs4AAv-s
Seg fault in `ndarray_tensor_bridge` due to zero and large inputs
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS13NTh3LTc5eHYtNnZjas4AAv-r
Out of bounds segmentation fault due to unequal op inputs in Tensorflow
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 3 months ago
High
GSA_kwCzR0hTQS05amp3LWhmNzItM214d84AAvMC
TensorFlow vulnerable to heap out of bounds read in filesystem glob matching
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 4 months ago
Moderate
GSA_kwCzR0hTQS1tNnZwLThxOWotd2h4NM4AAu27
TensorFlow vulnerable to `CHECK` fail in `Save` and `SaveSlices`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1wMnhmLThoZ20taHB3Nc4AAu26
TensorFlow vulnerable to `CHECK` fail in `ParameterizedTruncatedNormal`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS05OTQyLXIyMnYtNzhjcM4AAu25
TensorFlow vulnerable to `CHECK` fail in `LRNGrad`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS13cjl2LWc5dmYtYzc0ds4AAu24
TensorFlow vulnerable to segfault in `RaggedBincount`
Ecosystems: pypi
Packages: tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS05dnFqLTY0cHYtdzU1Y84AAu23
TensorFlow vulnerable to `CHECK` fail in `tf.linalg.matrix_rank`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1qNDNoLXBnbWctNWhqcc4AAu22
TensorFlow vulnerable to `CHECK` fail in `MaxPool`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS0zOTdjLTVnMmotcXhwds4AAu21
TensorFlow vulnerable to segfault in `SparseBincount`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS12eHY4LXI4cTItNjN4d84AAu20
TensorFlow vulnerable to `CHECK` fail in `FractionalMaxPoolGrad`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS12N3Z3LTU3N2YtdnA4eM4AAu2z
TensorFlow vulnerable to segfault in `QuantizedRelu` and `QuantizedRelu6`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS12Z3ZoLTJwZjQtanIyeM4AAu2y
TensorFlow vulnerable to segfault in `QuantizeDownAndShrinkRange`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS02ODljLXI3aDItZnY5ds4AAu2x
TensorFlow vulnerable to segfault in `QuantizedMatMul`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS00cGM0LW05bWotdjJyOc4AAu2w
TensorFlow vulnerable to segfault in `QuantizedBiasAdd`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS05ZnBnLTgzOHYtd3B2N84AAu2v
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVars`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1nMzVyLTM2OXctM2ZxcM4AAu2u
TensorFlow vulnerable to segfault in `QuantizedInstanceNorm`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1xMmMzLWpwbWMtZ2ZqeM4AAu2t
TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS0yNDc1LTUzdnctdnAyNc4AAu2s
TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS12NmgzLTM0OGctNmg1eM4AAu2r
TensorFlow vulnerable to segfault in `QuantizedAdd`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS00dzY4LTR4ODUtbWpqOc4AAu2q
TensorFlow vulnerable to segfault in `QuantizedAvgPool`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1oN2ZmLWNmYzktd21taM4AAu2p
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS12bTd4LTRxaGotcnJjcc4AAu2o
TensorFlow vulnerable to `CHECK` fail in `TensorListScatter` and `TensorListScatterV2`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1xeHB4LWozOTUtcHczNs4AAu2n
TensorFlow vulnerable to segfault in `LowerBound` and `UpperBound`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS05djh3LXhtcjQtd2d4cM4AAu2m
TensorFlow vulnerable to `CHECK` fail in `TensorListFromTensor`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS13cTZxLTZtMzItOXJ2Oc4AAu2l
TensorFlow vulnerable to `CHECK` fail in `SetSize`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1mN3I1LXE3Y3gtaDY2OM4AAu2k
TensorFlow vulnerable to segfault in `BlockLSTMGradV2`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS04NGptLTRjZjMtOWpmbc4AAu2j
TensorFlow vulnerable to `CHECK` failures in `FractionalAvgPoolGrad`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1oNXZxLWd3MmMtcHE0N84AAu2i
TensorFlow vulnerable to `CHECK` failures in `UnbatchGradOp`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS14OTg5LXEycHEtNHE1eM4AAu2h
TensorFlow vulnerable to Int overflow in `RaggedRangeOp`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1maGZjLTJxN3gtOTI5Zs4AAu2g
TensorFlow vulnerable to `CHECK` fail in `CollectiveGather`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS12NXhnLTNxMmMtYzJyNM4AAu2f
TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1xNWp2LW02cXctNWczN84AAu2e
TensorFlow vulnerable to floating point exception in `Conv2D`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS13eGpqLWNnY3gtcjN2cc4AAu2d
TensorFlow vulnerable to `CHECK` failures in `AvgPool3DGrad`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1xaHc0LXd3cjctZ2pjNc4AAu2c
TensorFlow vulnerable to `CHECK` fail in `EmptyTensorList`
Ecosystems: pypi
Packages: tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1mcXhjLXB2ZjgtMnc5ds4AAu2b
TensorFlow vulnerable to null dereference on MLIR on empty function attributes
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1qcW03LW01cTctM2htNc4AAu2a
TensorFlow vulnerable to `CHECK` fail in `DrawBoundingBoxes`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1taDNtLTYydjctNjh4Z84AAu2Y
TensorFlow vulnerable to `CHECK` fail in `Unbatch`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS04MjhjLTVqNXEtdnJqcc4AAu2X
TensorFlow vulnerable to null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1mdjQzLTkzZ3Ytdm04Zs4AAu2W
TensorFlow vulnerable to null dereference on MLIR on empty function attributes
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS13cW1jLXBtOGMtMmpoY84AAu2V
TensorFlow vulnerable to segfault in `Requantize`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1jdjJwLTMydjMtdmh3cc4AAu2U
TensorFlow vulnerable to `CHECK` fail in `RandomPoissonV2`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1yMjZjLTY3OXctbXJqbc4AAu2T
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsGradient`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1nOWg1LXZyOG0teDJoNM4AAu2S
TensorFlow vulnerable to `CHECK` fail in `AudioSummaryV2`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1tdjhtLTh4OTctOTM3cc4AAu2Q
TensorFlow vulnerable to `CHECK` fail in `tf.random.gamma`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Low
GSA_kwCzR0hTQS1nNDY4LXFqOGctdmNqY84AAu2P
TensorFlow vulnerable to `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS03ajNtLThnM2MtOXFxcc4AAu2N
TensorFlow vulnerable to null-dereference in `mlir::tfg::TFOp::nameAttr`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Low
GSA_kwCzR0hTQS1yaDg3LXE0dmctbTQ1as4AAu2M
TensorFlow vulnerable to integer overflow in math ops
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1qdmhjLTVoaHItdzN2Nc4AAu2L
TensorFlow vulnerable to assertion fail on MLIR empty edge names
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS13NjJoLTh4am0tZnY0Oc4AAu2K
TensorFlow vulnerable to `CHECK` fail in `DenseBincount`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1tZ21oLWcydjYtbXF3Nc4AAu2J
TensorFlow vulnerable to `CHECK` failure in `AvgPoolOp`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS05Y3IyLThwd3ItZmhmcc4AAu2H
TensorFlow vulnerable to `CHECK` fail in `QuantizeAndDequantizeV3`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1tNmN2LTRmbWYtNjZ4Zs4AAu2G
TensorFlow vulnerable to `CHECK` fail in `RaggedTensorToVariant`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS05ajR2LXBwMjgtbXh2N84AAu2F
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS03OWgyLXE3NjgtZnB4cs4AAu2D
TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
High
GSA_kwCzR0hTQS1mZmptLTRxd2MtN2NtZs4AAu2A
TensorFlow vulnerable to OOB write in `scatter_nd` in TF Lite
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
High
GSA_kwCzR0hTQS1weHJ3LWoyZnYtaHgzaM4AAu1_
TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1mNHc2LWg0ZjUtd3g0Nc4AAu13
TensorFlow vulnerable to `CHECK` failure in tf.reshape via overflows
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS05N3A3LXc4NmgtdmNmOc4AAu12
TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1wN2hyLWY0NDYteDZxZs4AAu1u
TensorFlow vulnerable to `CHECK` fail in `tf.sparse.cross`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS0zN2pmLW1qdjYteGZxd84AAu1t
TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1tdzZqLWhoMjktaDM3Oc4AArM-
`CHECK` failure in depthwise ops via overflows
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
High
GSA_kwCzR0hTQS03NWM5LWpyaDQtNzltY84AArBa
Code injection in `saved_model_cli` in TensorFlow
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS01ODg5LTd2NDUtcTI4bc4AArBZ
Incomplete validation in signal ops leads to crashes in TensorFlow
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS04d3dtLTYyNjQteDc5Ms4AArBY
Core dump when loading TFLite models with quantization in TensorFlow
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS14cnAyLWZocTQtNHEzd84AArBX
Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS1oYzJmLTdyNXItcjJoZ84AArBW
Heap buffer overflow due to incorrect hash function in TensorFlow
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS1mNHJyLTVtN3Ytd3hjd84AArBV
Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
High
GSA_kwCzR0hTQS0ycjJmLWc4bXctOWd2cs4AArBU
Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS01d3BqLWM2ZjctMjR4OM4AArBT
Undefined behavior when users supply invalid resource handles
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS1yYzl3LTVjNjQtOXZxcc4AArBS
Missing validation results in undefined behavior in `SparseTensorDenseAdd
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS01NGNoLWdqcTUtNDk3Ns4AArBR
Segfault due to missing support for quantized types
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS1oeDlxLTJteDQtbTRwZ84AArBQ
Missing validation causes denial of service via `Conv3DBackpropFilterV2`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS1qam02LTR2ZjctY2poNM4AArBP
Integer overflow in `SpaceToBatchND`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS1jd3BtLWY3OHYtN201Y84AArBO
Denial of service in `tf.ragged.constant` due to lack of validation
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS1wcWhtLTR3dmYtMmpnOM4AArBN
Missing validation results in undefined behavior in `QuantizedConv2D`
Ecosystems: pypi
Packages: tensorflow-gpu, tensorflow-cpu, tensorflow
Source: GitHub Advisory Database
Published: 9 months ago
Filter by Severity
Moderate 4,475 High 4,156 Critical 1,894 Low 621
Filter by Ecosystem
maven 3,466 npm 2,960 pypi 2,374 packagist 1,397 go 942 nuget 901 rubygems 640 cargo 575 hex 21 actions 6 pub 4
Filter by Package
tensorflow 403 tensorflow-gpu 366 tensorflow-cpu 366 apache-airflow 43 ansible 42 django 42 rdiffweb 40 Pillow 39 opencv-contrib-python 30 opencv-python 30 matrix-synapse 20 Plone 20 apache-superset 20 notebook 13 pyftpdlib 13 onionshare-cli 11 Django 11 twisted 10 vyper 10 calibreweb 9 waitress 9 opencv-python-headless 9 OctoPrint 8 pyload-ng 8 opencv-contrib-python-headless 8 urllib3 7 pillow 7 pysaml2 7 numpy 7 tensorflow-lite 7 Flask-AppBuilder 6 lief 6 ipython 6 inventree 6 python-gnupg 6 cobbler 6 wagtail 6 Zope2 6 Zope 5 bleach 5 matrix-sydent 5 salt 5 modoboa 5 tuf 5 pip 5 feedparser 5 lxml 5 cryptography 5 awsiotsdk 4 software.amazon.awssdk.iotdevicesdk:aws-iot-device-sdk 4 qutebrowser 4 scrapy 4 aws-iot-device-sdk-v2 4 nvflare 4 Flask-Security-Too 4 gerapy 4 graphite-web 4 markdown2 4 nltk 4 FreeTAKServer-UI 4 jupyter-server 4 plone.app.event 3 bitlyshortener 3 plone.app.theming 3 plone.app.dexterity 3 plone.supermodel 3 indy-node 3 ujson 3 omero-web 3 Pygments 3 Products.PluggableAuthService 3 ansible-runner 3 jupyterhub 3 fava 3 pyspark 3 requests 3 Jinja2 3 bottle 3 paramiko 3 werkzeug 3 oauthenticator 3 poetry 3 quokka 3 pyyaml 3 httpie 3 mistune 3 mitmproxy 3 Weblate 3 django-helpdesk 3 ecdsa 3 datasette 3 protobuf 3 aubio 3 moin 3 mayan-edms 3 ubi-reader 2 google/protobuf 2 typed-ast 2 github.com/protocolbuffers/protobuf 2 com.google.protobuf:protobuf-parent 2 Google.Protobuf 2 aioxmpp 2 aiohttp-session 2 SQLAlchemy 2 dompurify 2 simiki 2 parlai 2 pycrypto 2 bikeshed 2 openzeppelin-cairo-contracts 2 mako 2 plone 2 webargs 2 keystone 2 sickrage 2 py 2 aiohttp 2 rsa 2 httplib2 2 openapi-python-client 2 rpyc 2 sanic 2 wagtail-2fa 2 flask 2 ckan 2 keyring 2 petl 2 aws-encryption-sdk-cli 2 indico 2 Twisted 2 apache-iotdb 2 distributed 2 pyjwt 2 reportlab 2 html5lib 2 autobahn 2 flower 2 djangorestframework 2 untangle 2 org.apache.spark:spark-core 2 python-cjson 2 Red-DiscordBot 2 red-arrow 2 pyarrow 2 uvicorn 2 logilab-common 2 pyopenssl 2 django-sendfile2 2 websockets 2 python-ldap 2 safeurl-python 2 tryton 2 superset 2 pywasm3 2 tflite 2 paddlepaddle 2 ctx 2 guarddog 2 pgadmin4 2 roundup 2 pytorch-lightning 2 starkbank-ecdsa 2 saleor 2 python-keystoneclient 2 binwalk 2 tlslite-ng 2 FreeTAKServer 2 archivy 2 scout-browser 2 proteus 2 trytond 2 django-anymail 2 python-libnmap 2 localstack 2 gradio 2 Products.CMFPlone 2 nova 2 mailman 2 django-unicorn 2 aws-encryption-sdk 2 shuup 2 django-mfa3 1 flask-session-captcha 1 url_regex 1 xmpp-http-upload 1 blazar-dashboard 1 aleksis-core 1 ihatemoney 1 ipa 1 amundsen-frontend 1 datasette-graphql 1 py-mini-racer 1 red-dashboard 1 validators 1 Werkzeug 1 botframework-connector 1 tenable-jira-cloud 1 PyYAML 1 django-rest-registration 1 alerta-server 1 jupyter_server 1 jinja2 1 guake 1 django-photologue 1 plone.app.users 1 gunicorn 1 django-registration 1 io.github.talelin:lin-cms-core 1 Lin-CMS 1 invenio-records 1 papermerge 1 sopel-modules.weather 1 invenio-communities 1 Flask-Caching 1 asyncpg 1 supervisor 1 svglib 1 jw.util 1 contentful 1 Flask-User 1 api-res-py 1 mysql-connector-python 1 jupyter-notebook 1 xml2rfc 1 openssh-key-parser 1 swift 1 fastapi 1 Products.PasswordResetTool 1 modulemd 1 mpmath 1 python-fedora 1 exotel 1 Kotti 1 cinder 1 glance 1 PyInstaller 1 barbican 1 oslo-utils 1 onnx 1 Flask-Unchained 1 XML2Dict 1 pywin32 1 django-celery-results 1 Glances 1 future 1 django-termsandconditions 1 ladon 1 libtaxii 1 omero-figure 1 pipenv 1 mitogen 1 dnslib 1 django-cms 1 recommender-xblock 1 collective.task 1 SentineloneSDK 1 pywb 1 django-widgy 1 django-crm 1 pulsar-client 1 mat2 1 cvxopt 1 sqlite-web 1 CoAPthon 1 nbdime 1 celery 1 sqla-yaml-fixtures 1 conference-scheduler-cli 1 topydo 1 tripleo-heat-templates 1 ipycache 1 AccessControl 1 sqlparse 1 pypiserver 1 GitPython 1 pikepdf 1 pydantic 1 Scrapy 1 django-nopassword 1 cryptoauthlib 1 com.amazonaws:aws-encryption-sdk-java 1 fastecdsa 1 mkdocs 1 pybluemonday 1 github.com/microcosm-cc/bluemonday 1 rucio-webui 1 babel 1 django-two-factor-auth 1 org.apache.iotdb:iotdb-server 1 com.starkbank:ecdsa-java 1 starkbank-ecdsa 1 starkbank-ecdsa 1 mlflow 1 Shinken 1 wiki 1 apprise 1 APKLeaks 1 django-basic-auth-ip-whitelist 1 nbdime 1 yamale 1