aipack (>=0.0.1, <=0.0.5), animalai-train (>=2.0.0b0, <=2.0.0) +58 more potentially affected by CVE-2020-15206 via tensorflow (>=2.0.0, <=2.0.2)

tensorflow PYPI version =2.0.0, =0.0.1, =2.0.0b0, =0.1.3.2, =0.2.0, =0.0.2, =1.0.0.1, =0.0.1, =1.0.4, =0.11.0, =0.6.0.post3, =0.1.3, =1.0.0, =1.0.1 and more Source cves: CVE-2020-15206 Source advisory: OSV:PYSEC-2020-129...

gamornet-cpu (>=0.2.3, <=0.4.3), tchatbot (0.1.0) +1 more potentially affected by CVE-2020-15206 via tensorflow-cpu (1.15.0)

tensorflow-cpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - gamornet-cpu =0.2.3, =0.7.0, =0.7.5 Source cves: CVE-2020-15206 Source advisory: OSV:PYSEC-2020-286...

pycnet-audio (>=0.5.1, <=0.5.8) potentially affected by CVE-2020-15206 via tensorflow-cpu (2.2.0)

tensorflow-cpu PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - pycnet-audio =0.5.1, =0.5.8 Source cves: CVE-2020-15206 Source advisory: OSV:PYSEC-2020-286...

abba-python (>=0.1.6, <=0.3.0), accuinsight (1.0.1) +317 more potentially affected by CVE-2020-15206 via tensorflow (>=1.0.1, <=1.15.3)

tensorflow PYPI version =1.0.1, =0.1.6, =1.1.2, =0.0.1, =0.3.26, =0.2.0, =0.1.0, =0.4.0, =0.1.0, =0.1.1, =0.1.5 and more Source cves: CVE-2020-15206 Source advisory: OSV:PYSEC-2020-129...

aglvq (1.0.0), beacon-trellis (0.1.0) +74 more potentially affected by CVE-2020-15206 via tensorflow (>=2.1.0, <=2.1.1)

tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.2.2 - deepkingnet 0.0.1.dev0 - dgbpy-dm 0.1.2 and more Source cves: CVE-2020-15206 Source advisory: OSV:PYSEC-2020-129...

arekit (>=0.21.0, <=0.22.1), arenets (>=0.23.0, <=0.23.1) +51 more potentially affected by CVE-2020-15206 via tensorflow-gpu (>=1.1.0, <=1.15.3)

tensorflow-gpu PYPI version =1.1.0, =0.21.0, =0.23.0, =0.1.0, =1.0.0, =0.0.2, =0.1.2, =0.0.1, =0.0.7, =0.2.0 - keras-textclassification 0.1.6 and more Source cves: CVE-2020-15206 Source advisory: OSV:PYSEC-2020-321...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), monk-cuda100 (0.0.1) +9 more potentially affected by CVE-2020-15206 via tensorflow-gpu (>=2.0.0, <=2.0.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.9 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 - monk-keras-cuda101-test 0.0.1 - monk-keras-cuda102 0.0.1 -...

tensorflowjs (>=1.5.2, <=1.7.4) potentially affected by CVE-2020-15206 via tensorflow-cpu (2.1.0)

tensorflow-cpu PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - tensorflowjs =1.5.2, =1.7.4 Source cves: CVE-2020-15206 Source advisory: OSV:PYSEC-2020-286...

CVE-2020-15206 Denial of Service in Tensorflow

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorFlow's SavedModel protocol buffer and altering the name of required keys results in segfaults and data corruption while loading the model. This can cause a denial of service in products using tensorflow-servin...

pycnet-audio (>=0.5.1, <=0.5.8) potentially affected by CVE-2020-15206 via tensorflow-cpu (2.2.0)

tensorflow-cpu PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - pycnet-audio =0.5.1, =0.5.8 Source cves: CVE-2020-15206 Source advisory: MEND:CVE-2020-15206...

arekit (>=0.21.0, <=0.22.1), arenets (>=0.23.0, <=0.23.1) +51 more potentially affected by CVE-2020-15206 via tensorflow-gpu (>=1.1.0, <=1.15.3)

tensorflow-gpu PYPI version =1.1.0, =0.21.0, =0.23.0, =0.1.0, =1.0.0, =0.0.2, =0.1.2, =0.0.1, =0.0.7, =0.2.0 - keras-textclassification 0.1.6 and more Source cves: CVE-2020-15206 Source advisory: MEND:CVE-2020-15206...

CVE-2020-15206

CVE-2020-15206 affects TensorFlow: changing SavedModel protocol buffers and required key names can cause segfaults and data corruption while loading models, leading to a denial of service in inference deployments. The vulnerability was addressed with fixes committed in TF, and TensorFlow versions...

aipack (>=0.0.1, <=0.0.5), animalai-train (>=2.0.0b0, <=2.0.0) +58 more potentially affected by CVE-2020-15206 via tensorflow (>=2.0.0, <=2.0.2)

tensorflow PYPI version =2.0.0, =0.0.1, =2.0.0b0, =0.1.3.2, =0.2.0, =0.0.2, =1.0.0.1, =0.0.1, =1.0.4, =0.11.0, =0.6.0.post3, =0.1.3, =1.0.0, =1.0.1 and more Source cves: CVE-2020-15206 Source advisory: MEND:CVE-2020-15206...

adapt-diagnostics (1.2.0), adversarial-friend (1.1.8) +56 more potentially affected by CVE-2020-15206 via tensorflow (2.3.0)

tensorflow PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - adapt-diagnostics 1.2.0 - adversarial-friend 1.1.8 - apifish 0.6.2a1 - armcor 0.2.0 - biobeaker 0.0.1 - bmstu-ovchinnikov-capsnet =0.0.1a0,...

tensorflowjs (>=1.5.2, <=1.7.4) potentially affected by CVE-2020-15206 via tensorflow-cpu (2.1.0)

tensorflow-cpu PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - tensorflowjs =1.5.2, =1.7.4 Source cves: CVE-2020-15206 Source advisory: MEND:CVE-2020-15206...

deep-floorplan (0.0.0) potentially affected by CVE-2020-15206 via tensorflow-gpu (2.3.0)

tensorflow-gpu PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan 0.0.0 Source cves: CVE-2020-15206 Source advisory: MEND:CVE-2020-15206...

adapt-diagnostics (1.2.0), adversarial-friend (1.1.8) +56 more potentially affected by CVE-2020-15206 via tensorflow (2.3.0)

tensorflow PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - adapt-diagnostics 1.2.0 - adversarial-friend 1.1.8 - apifish 0.6.2a1 - armcor 0.2.0 - biobeaker 0.0.1 - bmstu-ovchinnikov-capsnet =0.0.1a0,...

aipack (>=0.0.1, <=0.0.5), animalai-train (>=2.0.0b0, <=2.0.0) +58 more potentially affected by CVE-2020-15206 via tensorflow (>=2.0.0, <=2.0.2)

tensorflow PYPI version =2.0.0, =0.0.1, =2.0.0b0, =0.1.3.2, =0.2.0, =0.0.2, =1.0.0.1, =0.0.1, =1.0.4, =0.11.0, =0.6.0.post3, =0.1.3, =1.0.0, =1.0.1 and more Source cves: CVE-2020-15206 Source advisory: OSV:GHSA-W5GH-2WR2-PM6G...

accuinsight (>=1.0.47, <=1.0.61), alibi (>=0.5.6, <=0.6.2) +96 more potentially affected by CVE-2020-15206 via tensorflow (2.2.0)

tensorflow PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - accuinsight =1.0.47, =0.5.6, =0.5.0, =0.1.0, =0.10.0.dev0, =0.5.0, =0.2.0, =0.0.8, =0.0.7, =0.1.0 and more Source cves: CVE-2020-15206 Sourc...

tensorflowjs (>=1.5.2, <=1.7.4) potentially affected by CVE-2020-15206 via tensorflow-cpu (2.1.0)

tensorflow-cpu PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - tensorflowjs =1.5.2, =1.7.4 Source cves: CVE-2020-15206 Source advisory: GHSA-W5GH-2WR2-PM6G...