Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2022-23557Division by zero in TFLitePyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23558Integer overflow in TFLite array creationPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23570Null-dereference in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23564Reachable Assertion in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23565`CHECK`-failures in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23562Integer overflow in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23563Insecure temporary file in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23559Integer overflow in TFLitePyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23560Read and Write outside of bounds in TFLitePyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23574Out of bounds read and write in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23571Reachable Assertion in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23566Out of bounds write in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23577Null-dereference in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23578Memory leak in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23572Crash when type cannot be specialized in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23573Uninitialized variable access in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23585Memory leak in decoding PNG images in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23579`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23580Abort caused by allocating a vector that is too large in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23581`CHECK`-failures during Grappler's `IsSimplifiableReshape` in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23575Integer overflow in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23576Integer overflow in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23588`CHECK`-fails due to attempting to build a reference tensor in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23589Null pointer dereference in Grappler's `IsConstant` in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23586Multiple `CHECK`-fails in `function.cc` in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23583`CHECK`-failures in binary ops in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23582`CHECK`-failures in `TensorByteSize` in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23584Use after free in `DecodePng` in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23587Integer overflow in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23592Out of bounds read in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.8.0