animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2022-36019 via tensorflow (1.12.2)

tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2022-36019 Source advisory: OSV:PYSEC-2026-3152...

cellunet (>=0.1.0, <=0.2.2), color2vec (1.0.0) +12 more potentially affected by CVE-2022-36019 via tensorflow (1.8.0)

tensorflow PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cellunet =0.1.0, =0.0.5.1, =0.1.0, =0.1.1.1, =1.1.0, =0.9.0a7, =0.1.0, =0.11.0, =0.4.1, =0.5.2, =0.5.5 Source cves: CVE-2022-36019 Source...

diluvian (>=0.0.2, <=0.0.3), guesslang (>=0.9.0rc5, <=0.9.1) +3 more potentially affected by CVE-2022-36019 via tensorflow (1.1.0)

tensorflow PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - diluvian =0.0.2, =0.9.0rc5, =0.9.1 - impyute 0.0.4 - rldqn 0.0.5 - russtress 0.1.0 Source cves: CVE-2022-36019 Source advisory:...

asc (>=0.1.0, <=0.3.1), openats (>=0.0.0.dev1, <=0.0.0.dev37) potentially affected by CVE-2022-36019 via tensorflow (1.2.1)

tensorflow PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - asc =0.1.0, =0.0.0.dev1, =0.0.0.dev37 Source cves: CVE-2022-36019 Source advisory: OSV:PYSEC-2026-3152...

es-distributed (0.1.0.dev0), strawberryfields (>=0.7.0, <=0.7.1) +1 more potentially affected by CVE-2022-36019 via tensorflow (1.3.0)

tensorflow PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - es-distributed 0.1.0.dev0 - strawberryfields =0.7.0, =0.7.1 - utensor-cgen 0.0.4 Source cves: CVE-2022-36019 Source advisory:...

hyperparameter-hunter (>=0.0.1, <=1.0.1), malaya (>=0.6.0.2, <=0.6.4) +2 more potentially affected by CVE-2022-36019 via tensorflow (1.5.0)

tensorflow PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - hyperparameter-hunter =0.0.1, =0.6.0.2, =1.3.6, =1.3.7 - talos 0.6.4 Source cves: CVE-2022-36019 Source advisory: OSV:PYSEC-2026-3152...

relion-yolo-it (0.1.3) potentially affected by CVE-2022-36019 via tensorflow-gpu (1.10.1)

tensorflow-gpu PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - relion-yolo-it 0.1.3 Source cves: CVE-2022-36019 Source advisory: OSV:PYSEC-2026-978...

causalegm (>=0.2.1, <=0.2.5), chrombpnet (>=0.1.0, <=0.1.2) +3 more potentially affected by CVE-2022-36019 via tensorflow-gpu (2.8.0)

tensorflow-gpu PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - causalegm =0.2.1, =0.1.0, =0.0.6, =2.3.5, =2.4.1 - tlaunch 0.0.2 Source cves: CVE-2022-36019 Source advisory: OSV:PYSEC-2026-978...

vcap (>=0.2.4.dev13, <=0.3.1) potentially affected by CVE-2022-36019 via tensorflow-gpu (1.15.4)

tensorflow-gpu PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - vcap =0.2.4.dev13, =0.3.1 Source cves: CVE-2022-36019 Source advisory: OSV:PYSEC-2026-978...

jlpyutils (>=0.0.7, <=0.1.1) potentially affected by CVE-2022-36019 via tensorflow-gpu (1.12.2)

tensorflow-gpu PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - jlpyutils =0.0.7, =0.1.1 Source cves: CVE-2022-36019 Source advisory: OSV:PYSEC-2026-978...

CVE-2022-36019

TensorFlow is an open source platform for machine learning. If FakeQuantWithMinMaxVarsPerChannel is given min or max tensors of a rank other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

SUSE CVE-2022-36019

TensorFlow is an open source platform for machine learning. If FakeQuantWithMinMaxVarsPerChannel is given min or max tensors of a rank other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-36019

creationtimestamp| type| source ---|---|--- 2022-09-17 02:35:20+00:00| seen| https://t.me/cibsecurity/50004 2025-04-23 17:04:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13072...

aliby (>=0.1.18, <=0.1.55), aliby-baby (>=0.1.11, <=0.1.17) +35 more potentially affected by CVE-2022-36019 via tensorflow (2.9.0)

tensorflow PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aliby =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.0.0, =1.3.0, =0.3.0, =1.2.0, =0.0.6, =0.0.9 - gcvit-tensorflow 1.2.1 - genericsnn 1.0.1...

CVE-2022-36019

CVE-2022-36019 affects TensorFlow: a CHECK failure in FakeQuantWithMinMaxVarsPerChannel when min/max tensors are not rank-1 can trigger a denial of service. Patched in commit 785d67a78a1d533759fcd2f5e8d6ef778de849e0; fix will be in TensorFlow 2.10.0, with cherry-picks to 2.9.1, 2.8.1, and 2.7.2. ...

CVE-2022-36019 `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel` in TensorFlow

TensorFlow is an open source platform for machine learning. If FakeQuantWithMinMaxVarsPerChannel is given min or max tensors of a rank other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

axelerate (>=0.5.2, <=0.5.5), bert-experimental (1.0.0) +24 more potentially affected by CVE-2022-36019 via tensorflow (1.15.2)

tensorflow PYPI version 1.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - axelerate =0.5.2, =2.0.1, =1.0.1, =0.1.0.dev1, =1.5.0.dev20210429, =1.5.0.dev20210512 - fedlearner-manylinux 1.5.0.dev20210429 -...

aether (>=0.3.26, <=0.3.32), animalai-train (>=0.4.2, <=0.5.0) +26 more potentially affected by CVE-2022-36019 via tensorflow (1.12.0)

tensorflow PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aether =0.3.26, =0.4.2, =1.0.17.1, =0.1.0, =0.3.1, =0.1.0, =0.0.1, =1.0.0, =0.7.0, =0.8.0 and more Source cves: CVE-2022-36019 Source...

branchedgp (1.0.0), fate-client (>=0.1.0, <=1.5.3) +9 more potentially affected by CVE-2022-36019 via tensorflow (1.15.4)

tensorflow PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - branchedgp 1.0.0 - fate-client =0.1.0, =0.2.2, =0.2.0, =0.2.4, =0.0.5.dev0, =1.5.0, =0.1.6, =0.2.4 Source cves: CVE-2022-36019 Source...

aadhaar-detection (0.5.0), abmarl (>=0.1.1, <=0.1.3) +551 more potentially affected by CVE-2022-36019 via tensorflow (>=2.0.0, <=2.7.1)

tensorflow PYPI version =2.0.0, =0.1.1, =1.0.47, =1.0.0, =1.2.0, =1.1.5, =0.0.1, =2.1.0, =0.1.11, =0.1.11, =0.1.20 - aisaratuners 1.4.2 and more Source cves: CVE-2022-36019 Source advisory: GHSA-9J4V-PP28-MXV7...