Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2021-29561CHECK-fail in `LoadAndRemapMatrix`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29562CHECK-fail in `tf.raw_ops.IRFFT`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29563CHECK-fail in `tf.raw_ops.RFFT`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29564Null pointer dereference in `EditDistance`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29565Null pointer dereference in `SparseFillEmptyRows`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29566Heap OOB access in `Dilation2DBackpropInput`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29567Lack of validation in `SparseDenseCwiseMul`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29568Reference binding to null in `ParameterizedTruncatedNormal`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29569Heap out of bounds read in `RequantizationRange`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29570Heap out of bounds read in `MaxPoolGradWithArgmax`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29571Memory corruption in `DrawBoundingBoxesV2`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29572Reference binding to nullptr in `SdcaOptimizer`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29573Division by 0 in `MaxPoolGradWithArgmax`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29574Undefined behavior in `MaxPool3DGradGrad`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29575Overflow/denial of service in `tf.raw_ops.ReverseSequence`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.2.3, 2.3.3 and more
- CVE-2021-29576Heap buffer overflow in `MaxPool3DGradGrad`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29577Heap buffer overflow in `AvgPool3DGrad`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29578Heap buffer overflow in `FractionalAvgPoolGrad`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29579Heap buffer overflow in `MaxPoolGrad`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29580Undefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29581Segfault in `CTCBeamSearchDecoder`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29582Heap OOB read in `tf.raw_ops.Dequantize`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29583Heap buffer overflow and undefined behavior in `FusedBatchNorm`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29584CHECK-fail due to integer overflowPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29525Division by 0 in `Conv2DBackpropInput`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29526Division by 0 in `Conv2D`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29527Division by 0 in `QuantizedConv2D`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29528Division by 0 in `QuantizedMul`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29529Heap buffer overflow caused by roundingPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29530Invalid validation in `SparseMatrixSparseCholesky`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more