GHSA-JJJ6-MW9F-P565 vulnerabilities

Vulnerabilities for packages: superset, openstack-horizon-2026.1-fips, open-webui, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, text-generation-inference, openstack-horizon-2025.2, mlflow, label-studio, tensorflow-gpu-jupyter...

GHSA-4X4J-2G7C-83W6 vulnerabilities

Vulnerabilities for packages: superset, openstack-horizon-2026.1-fips, open-webui, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, text-generation-inference, openstack-horizon-2025.2, mlflow, label-studio, tensorflow-gpu-jupyter...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: superset, openstack-horizon-2026.1-fips, open-webui, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, text-generation-inference, openstack-horizon-2025.2, mlflow, label-studio, tensorflow-gpu-jupyter...

GHSA-45HQ-CXWH-F6VC vulnerabilities

Vulnerabilities for packages: superset, openstack-horizon-2026.1-fips, open-webui, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, text-generation-inference, openstack-horizon-2025.2, mlflow, label-studio, tensorflow-gpu-jupyter...

GHSA-8V84-F9PQ-WR9X vulnerabilities

Vulnerabilities for packages: superset, openstack-horizon-2026.1-fips, open-webui, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, text-generation-inference, openstack-horizon-2025.2, mlflow, label-studio, tensorflow-gpu-jupyter...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: superset, openstack-horizon-2026.1-fips, open-webui, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, text-generation-inference, openstack-horizon-2025.2, mlflow, label-studio, tensorflow-gpu-jupyter...

GHSA-62P4-GMF7-7G93 vulnerabilities

Vulnerabilities for packages: superset, openstack-horizon-2026.1-fips, open-webui, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, text-generation-inference, openstack-horizon-2025.2, mlflow, label-studio, tensorflow-gpu-jupyter...

GHSA-9HW9-CH79-4VH6 vulnerabilities

Vulnerabilities for packages: superset, openstack-horizon-2026.1-fips, open-webui, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, text-generation-inference, openstack-horizon-2025.2, mlflow, label-studio, tensorflow-gpu-jupyter...

CLEANSTART-2026-CR75797 Security fixes for CVE-2026-25645, CVE-2026-39822, CVE-2026-42505, CVE-2026-59884, CVE-2026-59885, CVE-2026-59886 applied in versions: 2.20.0-r0, 2.20.0-r1

Multiple security vulnerabilities affect the tensorflow-gpu-jupyter package. These issues are resolved in later releases. See references for individual vulnerability details...

PYSEC-2026-3331 TensorFlow has segfault in array_ops.upper_bound

Impact arrayops.upperbound causes a segfault when not given a rank 2 tensor. Patches We have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586. The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more information...

PYSEC-2026-3190 TensorFlow has segfault in array_ops.upper_bound

Impact arrayops.upperbound causes a segfault when not given a rank 2 tensor. Patches We have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586. The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more information...

PYSEC-2026-3385 Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

PYSEC-2026-2523 Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

PYSEC-2026-3182 TensorFlow Denial of Service vulnerability

Impact A malicious invalid input crashes a tensorflow model Check Failed and can be used to trigger a denial of service attack. To minimize the bug, we built a simple single-layer TensorFlow model containing a Convolution3DTranspose layer, which works well with expected inputs and can be deployed...

PYSEC-2026-3130 TensorFlow vulnerable to integer overflow in EditDistance

Impact TFversion 2.11.0 //tensorflow/core/ops/arrayops.cc:1067 const Tensor hypothesisshapet = c-inputtensor2; std::vector dimshypothesisshapet-NumElements - 1; for int i = 0; i MakeDimstd::maxhvaluesi, tvaluesi; if hypothesisshapet is empty, hypothesisshapet-NumElements - 1 will be integer...

PYSEC-2026-3282 TensorFlow has Null Pointer Error in TensorArrayConcatV2

Impact When ctx-stepcontainter is a null ptr, the Lookup function will be executed with a null pointer. python import tensorflow as tf tf.rawops.TensorArrayConcatV2handle='a', 'b', flowin = 0.1, dtype=tf.int32, elementshapeexcept0=1 Patches We have patched the issue in GitHub commit...

PYSEC-2026-3293 TensorFlow vulnerable to integer overflow in EditDistance

Impact TFversion 2.11.0 //tensorflow/core/ops/arrayops.cc:1067 const Tensor hypothesisshapet = c-inputtensor2; std::vector dimshypothesisshapet-NumElements - 1; for int i = 0; i MakeDimstd::maxhvaluesi, tvaluesi; if hypothesisshapet is empty, hypothesisshapet-NumElements - 1 will be integer...

PYSEC-2026-3231 TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`

Impact When the parameter summarize of tf.rawops.Print is zero, the new method SummarizeArray will reference to a nullptr, leading to a seg fault. python import tensorflow as tf tf.rawops.Printinput = tf.constant1, 1, 1, 1,dtype=tf.int32, data = False, False, False, False, False, False, False,...

PYSEC-2026-3362 TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`

Impact When the parameter summarize of tf.rawops.Print is zero, the new method SummarizeArray will reference to a nullptr, leading to a seg fault. python import tensorflow as tf tf.rawops.Printinput = tf.constant1, 1, 1, 1,dtype=tf.int32, data = False, False, False, False, False, False, False,...

PYSEC-2026-3122 TensorFlow has Heap-buffer-overflow in AvgPoolGrad

Impact python import os os.environ'TFENABLEONEDNNOPTS' = '0' import tensorflow as tf printtf.version with tf.device"CPU": ksize = 1, 40, 128, 1 strides = 1, 128, 128, 30 padding = "SAME" dataformat = "NHWC" originputshape = 11, 9, 78, 9 grad = tf.saturatecasttf.random.uniform16, 16, 16, 16,...