CVE-2021-29616

TensorFlow is an end-to-end open source platform for machine learning. The implementation of TrySimplifyhttps://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/grappler/optimizers/arithmeticoptimizer.ccL390-L401 has undefined behavior due to...

cellunet (>=0.1.0, <=0.2.2), color2vec (1.0.0) +12 more potentially affected by CVE-2021-29616 via tensorflow (1.8.0)

tensorflow PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cellunet =0.1.0, =0.0.5.1, =0.1.0, =0.1.1.1, =1.1.0, =0.9.0a7, =0.1.0, =0.11.0, =0.4.1, =0.5.2, =0.5.5 Source cves: CVE-2021-29616 Source...

adpred (>=1.1.2, <=1.2.7), aix360 (>=0.2.0, <=0.2.1) +73 more potentially affected by CVE-2021-29616 via tensorflow (1.14.0)

tensorflow PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - adpred =1.1.2, =0.2.0, =1.0.4, =0.1.1, =1.0.2, =0.0.4, =0.1.0, =0.92.0, =0.12.0, =0.22.0 and more Source cves: CVE-2021-29616 Source...

alfabet (0.0.5), alibi (>=0.3.1, <=0.5.1) +67 more potentially affected by CVE-2021-29616 via tensorflow (1.15.5)

tensorflow PYPI version 1.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - alfabet 0.0.5 - alibi =0.3.1, =0.1.0, =1.0.2, =0.1.0a3, =0.1.1, =0.0.1, =0.1.14, =0.2.0, =0.0.1, =0.1.0, =0.7.0 and more Source cves:...

aether (>=0.3.26, <=0.3.32), animalai-train (>=0.4.2, <=0.5.0) +26 more potentially affected by CVE-2021-29616 via tensorflow (1.12.0)

tensorflow PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aether =0.3.26, =0.4.2, =1.0.17.1, =0.1.0, =0.3.1, =0.1.0, =0.0.1, =1.0.0, =0.7.0, =0.8.0 and more Source cves: CVE-2021-29616 Source...

cf-nlp (>=0.1.0, <=0.1.1), dlgo (0.2.0) +2 more potentially affected by CVE-2021-29616 via tensorflow (1.10.1)

tensorflow PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cf-nlp =0.1.0, =0.6.0, =0.6.1 Source cves: CVE-2021-29616 Source advisory: OSV:GHSA-4HVV-7X94-7VQ8...

axelerate (>=0.5.8, <=0.5.9), bianbu-ai-toolkit-tf1 (1.0.6) +27 more potentially affected by CVE-2021-29616 via tensorflow (1.15.3)

tensorflow PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - axelerate =0.5.8, =0.0.1.2, =0.0.13, =1.1.0, =0.22.0, =1.6.0, =4.1.3, =0.10.0.dev1, =0.11.0 - muffnn 2.3.1 - neoepiscope 0.4.0 and more...

axelerate (>=0.5.2, <=0.5.5), bert-experimental (1.0.0) +24 more potentially affected by CVE-2021-29616 via tensorflow (1.15.2)

tensorflow PYPI version 1.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - axelerate =0.5.2, =2.0.1, =1.0.1, =0.1.0.dev1, =1.5.0.dev20210429, =1.5.0.dev20210512 - fedlearner-manylinux 1.5.0.dev20210429 -...

accuinsight (1.0.1), aimodelshare (0.1.52) +83 more potentially affected by CVE-2021-29616 via tensorflow (1.13.1)

tensorflow PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - accuinsight 1.0.1 - aimodelshare 0.1.52 - amber-automl =0.1.0, =19.3.0, =1.0.1, =1.1.0, =0.0.1, =0.3.4, =0.1.0, =0.0.1, =0.0.0.45.8, =1.1.1...

aglvq (1.0.0), aipack (>=0.0.1, <=0.0.5) +142 more potentially affected by CVE-2021-29616 via tensorflow (>=2.0.0, <=2.1.2)

tensorflow PYPI version =2.0.0, =0.0.1, =2.0.0b0, =0.1.3.2, =3.0.0, =0.2.0, =0.0.2, =1.0.0.1, =0.0.1, =0.2.1 - colornet 0.2.0 and more Source cves: CVE-2021-29616 Source advisory: GHSA-4HVV-7X94-7VQ8...

mlbench-core (>=2.4.0.dev276, <=2.4.0.dev279), openml-keras (0.0.0) +8 more potentially affected by CVE-2021-29616 via tensorflow (1.13.2)

tensorflow PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - mlbench-core =2.4.0.dev276, =0.1.0, =0.4.0, =0.14.0, =0.1.4, =0.3.0, =0.3.4 - rasa-print 0.3.1 Source cves: CVE-2021-29616 Source advisory:...

accuinsight (>=1.0.47, <=1.0.61), alibi (>=0.5.6, <=0.6.2) +102 more potentially affected by CVE-2021-29616 via tensorflow (>=2.2.0, <=2.2.2)

tensorflow PYPI version =2.2.0, =1.0.47, =0.5.6, =0.5.0, =0.1.0, =0.10.0.dev0, =0.5.0, =0.2.0, =0.0.8, =0.0.7, =0.1.0 and more Source cves: CVE-2021-29616 Source advisory: OSV:GHSA-4HVV-7X94-7VQ8...

accuinsight (>=1.0.62, <=3.0.0), adapt-diagnostics (>=1.2.0, <=1.6.0) +95 more potentially affected by CVE-2021-29616 via tensorflow (>=2.3.0, <=2.3.2)

tensorflow PYPI version =2.3.0, =1.0.62, =1.2.0, =0.0.1a0, =0.0.1, =1.0.0rc1, =20210206.0.0, =0.1.0.dev1, =0.2.4, =1.0.1.0, =0.1.0, =2.0.0rc1, =2.0.3 and more Source cves: CVE-2021-29616 Source advisory: GHSA-4HVV-7X94-7VQ8...

verse16 (>=0.1.1, <=0.1.2) potentially affected by CVE-2021-29616 via tensorflow-gpu (1.15.3)

tensorflow-gpu PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - verse16 =0.1.1, =0.1.2 Source cves: CVE-2021-29616 Source advisory: OSV:GHSA-4HVV-7X94-7VQ8...

delft (0.2.2) potentially affected by CVE-2021-29616 via tensorflow-gpu (1.9.0)

tensorflow-gpu PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - delft 0.2.2 Source cves: CVE-2021-29616 Source advisory: OSV:GHSA-4HVV-7X94-7VQ8...

abmarl (>=0.1.1, <=0.1.3), agrothon (>=1.1.5, <=1.3.2) +79 more potentially affected by CVE-2021-29616 via tensorflow (>=2.4.0, <=2.4.1)

tensorflow PYPI version =2.4.0, =0.1.1, =1.1.5, =2.1.0, =0.0.1, =0.0.6, =0.1.0, =1.4.0, =1.2.2, =20210221.0.0, =0.7.2, =0.0.0, =0.0.0.post0 and more Source cves: CVE-2021-29616 Source advisory: OSV:GHSA-4HVV-7X94-7VQ8...

tensorflowjs (>=1.5.2, <=1.7.4) potentially affected by CVE-2021-29616 via tensorflow-cpu (2.1.0)

tensorflow-cpu PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - tensorflowjs =1.5.2, =1.7.4 Source cves: CVE-2021-29616 Source advisory: GHSA-4HVV-7X94-7VQ8...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), easyquake (>=1.1.0, <=1.2.2) +17 more potentially affected by CVE-2021-29616 via tensorflow-gpu (>=2.0.0, <=2.1.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.0, =0.2.0, =0.6.4, =0.6.5 - maupassant 0.1.1 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 -...

animalai-train (0.4.0), mlagents (>=0.4.0, <=0.10.0.dev0) +2 more potentially affected by CVE-2021-29616 via tensorflow (1.7.1)

tensorflow PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train 0.4.0 - mlagents =0.4.0, =0.10.0.dev0 - pytransdec 0.2.1 - unityagents 0.4.0 Source cves: CVE-2021-29616 Source advisory:...

jlpyutils (>=0.0.7, <=0.1.1) potentially affected by CVE-2021-29616 via tensorflow-gpu (1.12.2)

tensorflow-gpu PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - jlpyutils =0.0.7, =0.1.1 Source cves: CVE-2021-29616 Source advisory: OSV:GHSA-4HVV-7X94-7VQ8...