appdaemon (>=4.0.4, <=4.0.5), aviatrix-discovery (>=0.2.100, <=0.2.148) +18 more potentially affected by CVE-2022-30187 via azure-storage-queue (1.4.0)

azure-storage-queue PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-queue and may be impacted: - appdaemon =4.0.4, =0.2.100, =0.2.123, =3.0.0, =1.0.86, =1.0.0, =0.0.2, =0.0.1, =0.15.8, =0.2.10, =1.12.1, =2.4.1 and more...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2022-29193 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2022-29193...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +33 more potentially affected by CVE-2022-23584 via tensorflow (2.7.0)

tensorflow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =3.0.22, =0.1.11, =0.1.11, =0.1.11, =0.1.0, =0.0.1, =0.1.5.dev202303131412, =0.1.0, =0.1.1 an...

Out of bounds read in Tensorflow

ImpactThe TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect.If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can caus...

Multiple `CHECK`-fails in `function.cc` in TensowFlow

ImpactA malicious user can cause a denial of service by altering a SavedModel such that assertions in function.cc would be falsified and crash the Python interpreter. PatchesWe have patched the issue in GitHub commits dcc21c7bc972b10b6fb95c2fb0f4ab5a59680ec2 and...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2022-23588 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2022-23588...

PYSEC-2026-3096 Multiple `CHECK`-fails in `function.cc` in TensowFlow

Impact A malicious user can cause a denial of service by altering a SavedModel such that assertions in function.cc would be falsified and crash the Python interpreter. Patches We have patched the issue in GitHub commits dcc21c7bc972b10b6fb95c2fb0f4ab5a59680ec2 and...

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...

phenopype (>=0.6.1, <=0.9.0), videotracking (>=0.0.1, <=0.0.16) potentially affected by CVE-2019-5063 via opencv-contrib-python (3.4.5.20)

opencv-contrib-python PYPI version 3.4.5.20 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python and may be impacted: - phenopype =0.6.1, =0.0.1, =0.0.16 Source cves: CVE-2019-5063 Source advisory: OSV:PYSEC-2026-2801...

anipose (>=0.5.0, <=0.9.0), aniposelib (>=0.3.7, <=0.4.2) +2 more potentially affected by CVE-2019-5064 via opencv-contrib-python (3.4.18.65)

opencv-contrib-python PYPI version 3.4.18.65 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python and may be impacted: - anipose =0.5.0, =0.3.7, =0.2.9, =0.5.1, =1.0.5 Source cves: CVE-2019-5064 Source advisory: OSV:PYSEC-2026-2802...

cerebro8 (0.0.1), processedpirecorder (0.3.1) potentially affected by CVE-2019-5064 via opencv-contrib-python (3.4.4.19)

opencv-contrib-python PYPI version 3.4.4.19 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python and may be impacted: - cerebro8 0.0.1 - processedpirecorder 0.3.1 Source cves: CVE-2019-5064 Source advisory: OSV:PYSEC-2026-2802...

deeplabcut (>=2.1.10.3, <=2.2.0rc2) potentially affected by CVE-2019-5063 via opencv-python-headless (3.4.9.33)

opencv-python-headless PYPI version 3.4.9.33 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - deeplabcut =2.1.10.3, =2.2.0rc2 Source cves: CVE-2019-5063 Source advisory: OSV:PYSEC-2026-2840...

evenvizion (>=0.9.2, <=0.9.7), instabase-env (>=0.1.0, <=0.3.0) +2 more potentially affected by CVE-2019-5063 via opencv-contrib-python (3.4.2.17)

opencv-contrib-python PYPI version 3.4.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python and may be impacted: - evenvizion =0.9.2, =0.1.0, =1.0.1, =1.0.4 Source cves: CVE-2019-5063 Source advisory: OSV:PYSEC-2026-2801...

arucophotoembedding (0.0.1), arvideo (0.0.1) +4 more potentially affected by CVE-2019-5063 via opencv-contrib-python (>=4.0.0.21, <=4.1.0.25)

opencv-contrib-python PYPI version =4.0.0.21, =0.0.1, =0.0.2, =0.9.1, =0.0.12, =0.0.13 Source cves: CVE-2019-5063 Source advisory: OSV:PYSEC-2026-2801...

aime-detector-sdk (>=0.0.4.post1, <=0.1.5.post5), aliby (>=0.1.43, <=0.1.55) +80 more potentially affected by CVE-2019-5064 via opencv-python (>=4.0.0.21, <=4.1.2.30)

opencv-python PYPI version =4.0.0.21, =0.0.4.post1, =0.1.43, =0.4.2, =0.1.0, =0.9.2, =0.5.2, =0.0.3, =0.0.4, =0.0.11, =0.0.0, =0.0.1.22 and more Source cves: CVE-2019-5064 Source advisory: OSV:PYSEC-2026-2828...

pufferlib (>=0.7.0, <=2.0.6) potentially affected by CVE-2019-5064 via opencv-python (3.4.17.63)

opencv-python PYPI version 3.4.17.63 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - pufferlib =0.7.0, =2.0.6 Source cves: CVE-2019-5064 Source advisory: OSV:PYSEC-2026-2828...

pyxvis (>=0.1.0a2, <=0.1.0a6) potentially affected by CVE-2019-5064 via opencv-contrib-python (3.4.16.57)

opencv-contrib-python PYPI version 3.4.16.57 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python and may be impacted: - pyxvis =0.1.0a2, =0.1.0a6 Source cves: CVE-2019-5064 Source advisory: OSV:PYSEC-2026-2802...

phenopype (>=1.0.6, <=3.4.2) potentially affected by CVE-2019-5063 via opencv-contrib-python (3.4.9.33)

opencv-contrib-python PYPI version 3.4.9.33 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-contrib-python and may be impacted: - phenopype =1.0.6, =3.4.2 Source cves: CVE-2019-5063 Source advisory: OSV:PYSEC-2026-2801...

byu-auvsi-imaging-client (>=0.1.1, <=0.1.8), dtlpy (>=1.14.2, <=1.15.11) +10 more potentially affected by CVE-2019-5064 via opencv-python (3.4.2.17)

opencv-python PYPI version 3.4.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - byu-auvsi-imaging-client =0.1.1, =1.14.2, =0.9.2, =0.0.1, =0.0.9, =0.0.1, =0.0.2 - vissl 0.1.2 Source cves: CVE-2019-5064 Source...

deepomatic-cli (>=0.6.1, <=0.7.2), kuto (0.0.43) +2 more potentially affected by CVE-2019-5063 via opencv-python-headless (3.4.18.65)

opencv-python-headless PYPI version 3.4.18.65 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - deepomatic-cli =0.6.1, =1.0.38, =1.0.44 Source cves: CVE-2019-5063 Source advisory: OSV:PYSEC-2026-2840...