Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2021-29531CHECK-fail in tf.raw_ops.EncodePngPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29532Heap out of bounds read in `RaggedCross`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29533CHECK-fail in DrawBoundingBoxesPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29534CHECK-fail in SparseConcatPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29535Heap buffer overflow in `QuantizedMul`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29536Heap buffer overflow in `QuantizedReshape`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29537Heap buffer overflow in `QuantizedResizeBilinear`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29538Division by zero in `Conv2DBackpropFilter`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29539Segfault in tf.raw_ops.ImmutableConstPyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29540Heap buffer overflow in `Conv2DBackpropFilter`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29541Null pointer dereference in `StringNGrams`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29542Heap buffer overflow in `StringNGrams`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29543CHECK-fail in `CTCGreedyDecoder`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29544CHECK-fail in `QuantizeAndDequantizeV4Grad`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29545Heap buffer overflow in `SparseTensorToCSRSparseMatrix`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29546Division by 0 in `QuantizedBiasAdd`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29547Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29548Division by 0 in `QuantizedBatchNormWithGlobalNormalization`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29549Division by 0 in `QuantizedAdd`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29550Division by 0 in `FractionalAvgPool`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29551OOB read in `MatrixTriangularSolve`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.2.0rc0, 2.3.0rc0, 2.3.4 and more
- CVE-2021-29552CHECK-failure in `UnsortedSegmentJoin`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29553Heap OOB in `QuantizeAndDequantizeV3`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.1.4, 2.2.3, 2.3.3 and more
- CVE-2021-29554Division by 0 in `DenseCountSparseOutput`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.3.3, 2.4.2, 2.1.4 and more
- CVE-2021-29512Heap buffer overflow in `RaggedBinCount`PyPI · tensorflow, tensorflow-cpu +1 · fixed in 2.3.3, 2.4.2
- CVE-2021-33026The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local prPyPI · flask-caching
- CVE-2021-29510Use of "infinity" as an input to datetime and date fields causes infinite loop in pydanticPyPI · pydantic · fixed in 1.6.2, 1.7.4, 1.8.2
- CVE-2021-29471Denial of service in Matrix SynapsePyPI · matrix-synapse · fixed in 1.33.2
- CVE-2021-32561OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.PyPI · octoprint · fixed in 1.6.0
- CVE-2021-32560The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.PyPI · octoprint · fixed in 1.6.0