Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2022-23595Null pointer dereference in TensorFlowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23594Out of bounds read in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.7.1
- CVE-2022-23590Crash due to erroneous `StatusOr` in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.7.1
- CVE-2022-23591Stack overflow in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23593Segfault in `simplifyBroadcast` in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.8.0
- CVE-2022-21740Heap overflow in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21741Division by zero in TFLitePyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21737Assertion failure based denial of service in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21738Integer overflow leading to crash in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21739Null pointer dereference in TensorFlowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21734`CHECK`-failures in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21735Division by zero in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23569`CHECK`-fails when building invalid tensor shapes in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21729Overflow and uncaught divide by zero in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21725Division by zero in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21736Undefined behavior in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23567Integer overflows in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-23568Integer overflows in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21731Type confusion leading to segfault in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21733Memory exhaustion in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21732Memory exhaustion in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21727Integer overflow in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21726Out of bounds read in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21728Out of bounds read in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-21730Out of bounds read in TensorflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.5.3, 2.6.3, 2.7.1
- CVE-2022-22818The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current contePyPI · django · fixed in 2.2.27, 3.2.12, 4.0.2
- CVE-2022-23833An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2.PyPI · django · fixed in 2.2.27, 3.2.12, 4.0.2
- CVE-2021-44451API sensitive information leakPyPI · apache-superset · fixed in 1.4.0
- CVE-2022-23607Unsafe handling of user-specified cookies in treqPyPI · treq · fixed in 22.1.0
- CVE-2022-21659Observable Response Discrepancy in Flask-AppBuilderPyPI · flask-appbuilder · fixed in 3.4.4, 3.4.2