hyperparameter-hunter (>=0.0.1, <=1.0.1), malaya (>=0.6.0.2, <=0.6.4) +2 more potentially affected by CVE-2022-21726 via tensorflow (1.5.0)

tensorflow PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - hyperparameter-hunter =0.0.1, =0.6.0.2, =1.3.6, =1.3.7 - talos 0.6.4 Source cves: CVE-2022-21726 Source advisory: OSV:PYSEC-2026-3082...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2022-21726 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2022-21726 Source advisory: OSV:PYSEC-2026-3082...

diluvian (>=0.0.2, <=0.0.3), guesslang (>=0.9.0rc5, <=0.9.1) +3 more potentially affected by CVE-2022-21726 via tensorflow (1.1.0)

tensorflow PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - diluvian =0.0.2, =0.9.0rc5, =0.9.1 - impyute 0.0.4 - rldqn 0.0.5 - russtress 0.1.0 Source cves: CVE-2022-21726 Source advisory:...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-21726 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-21726 Source advisory: OSV:PYSEC-2026-3082...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +33 more potentially affected by CVE-2022-23581 via tensorflow (2.7.0)

tensorflow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =3.0.22, =0.1.11, =0.1.11, =0.1.11, =0.1.0, =0.0.1, =0.1.5.dev202303131412, =0.1.0, =0.1.1 an...

hyperparameter-hunter (>=0.0.1, <=1.0.1), malaya (>=0.6.0.2, <=0.6.4) +2 more potentially affected by CVE-2022-23581 via tensorflow (1.5.0)

tensorflow PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - hyperparameter-hunter =0.0.1, =0.6.0.2, =1.3.6, =1.3.7 - talos 0.6.4 Source cves: CVE-2022-23581 Source advisory: OSV:PYSEC-2026-3175...

adpred (>=1.1.2, <=1.2.7), aix360 (>=0.2.0, <=0.2.1) +73 more potentially affected by CVE-2022-23581 via tensorflow (1.14.0)

tensorflow PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - adpred =1.1.2, =0.2.0, =1.0.4, =0.1.1, =1.0.2, =0.0.4, =0.1.0, =0.92.0, =0.12.0, =0.22.0 and more Source cves: CVE-2022-23581 Source...

program-synthesis (0.1.2), qfragment (0.0.16) potentially affected by CVE-2022-21726 via tensorflow (1.5.1)

tensorflow PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - program-synthesis 0.1.2 - qfragment 0.0.16 Source cves: CVE-2022-21726 Source advisory: OSV:PYSEC-2026-3082...

PT-2026-59842

Impact A GraphDef from a TensorFlow SavedModel can be maliciously altered to cause a TensorFlow process to crash due to encountering a StatusOr value that is an error and forcibly extracting the value from it: cc if op reg data-type ctor != nullptr VLOG3 op def; const FullTypeDef ctor typedef =...

PT-2026-59707

Impact The implementation of tf.raw ops.EditDistance has incomplete validation. Users can pass negative values to cause a segmentation fault based denial of service: python import tensorflow as tf hypothesis indices = tf.constant-1250999896764, shape=3, 3, dtype=tf.int64 hypothesis values =...

PT-2026-59728

Impact TensorFlow is vulnerable to a heap OOB write in Grappler: cc Status SetUnknownShapeconst NodeDef node, int output port shape inference::ShapeHandle shape = GetUnknownOutputShapenode, output port; InferenceContext ctx = GetContextnode; if ctx == nullptr return errors::InvalidArgument"Missin...

PT-2026-59948

Impact The implementation of tf.raw ops.QuantizeAndDequantizeV4Grad does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf tf.raw ops.QuantizeAndDequantizeV4Grad gradients=tf.constant1,...

PT-2026-59763

Impact An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operations: cc int embedding size = 1; int lookup size = 1; for int i = 0; i data.i32i; lookup size = dim; output shape-datak = dim; for int i = 1; i datak = dim; Both embedding size and lookup si...

PT-2026-59814

Impact The implementation of tf.raw ops.DeleteSessionTensor does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf handle = tf.constant"", shape=0, dtype=tf.string tf.raw...

PT-2026-59810

Impact The simplifyBroadcast function in the MLIR-TFRT infrastructure in TensorFlow is vulnerable to a segfault hence, denial of service, if called with scalar shapes. cc size t maxRank = 0; for auto shape : llvm::enumerateshapes auto found shape = analysis.dimensionsForShapeTensorshape.value; if...

PT-2026-59755

Impact If a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize: cc Status s = params .create kerneln-properties, &item-kernel; if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a...

PT-2026-59895

Impact Multiple TensorFlow operations misbehave in eager mode when the resource handle provided to them is invalid: python import tensorflow as tf tf.raw ops.QueueIsClosedV2handle= python import tensorflow as tf tf.summary.flushwriter= In graph mode, it would have been impossible to perform these...

PT-2026-59862

Impact The implementation of FractionalAvgPoolGrad does not consider cases where the input tensors are invalid allowing an attacker to read from outside of bounds of heap: python import tensorflow as tf @tf.function def test: y = tf.raw ops.FractionalAvgPoolGrad orig input tensor shape=2,2,2,2, o...

PT-2026-59776

Impact The implementation of shape inference for Dequantize is vulnerable to an integer overflow weakness: python import tensorflow as tf input = tf.constant1,1,dtype=tf.qint32 @tf.function def test: y = tf.raw ops.Dequantize input=input, min range=1.0, max range=10.0, mode='MIN COMBINED', narrow...

PT-2026-59851

Impact The implementation of tf.raw ops.SparseTensorDenseAdd does not fully validate the input arguments: python import tensorflow as tf a indices = tf.constant0, shape=17, 2, dtype=tf.int64 a values = tf.constant, shape=0, dtype=tf.float32 a shape = tf.constant6, 12, shape=2, dtype=tf.int64 b =...