Linux Distros Unpatched Vulnerability : CVE-2025-0649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash...

DEBIAN-CVE-2025-0649

Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash...

CVE-2025-0649

Removed by vendor...

CVE-2025-0649 Stack Exhaustion In Tensorflow Serving

Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash...

CVE-2025-0649 Stack Exhaustion In Tensorflow Serving

Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash...

CVE-2025-0649

CVE-2025-0649 affects Google’s TensorFlow Serving up to version 2.18.0, where an incorrect JSON input stringification can lead to potentially unbounded recursion and a server crash. Root cause: improper handling of JSON inputs in the serving component. Impact: high availability risk (server crash...

PT-2025-19869 · Unknown · Tensorflow

Name of the Vulnerable Software and Affected Versions: Tensorflow serving versions up to 2.18.0 Description: The issue is related to incorrect JSON input stringification in Tensorflow serving, which allows for potentially unbounded recursion. This can lead to a server crash. Recommendations: For...

TensorFlow Serving 安全漏洞

TensorFlow Serving is a flexible, high-performance machine learning model serving system open-sourced by TensorFlow. A security vulnerability exists in TensorFlow Serving version 2.18.0 and earlier, which stems from improper stringing of JSON inputs and could lead to infinite recursion and server...

BIT-TENSORFLOW-2020-15206 Denial of Service in Tensorflow

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorFlow's SavedModel protocol buffer and altering the name of required keys results in segfaults and data corruption while loading the model. This can cause a denial of service in products using tensorflow-servin...

CVE-2023-46136 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow-core, py3-werkzeug, airflow, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, py3-tensorflow-serving-api...

GHSA-HRFV-MQP8-Q5RW vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow-core, py3-werkzeug, airflow, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, py3-tensorflow-serving-api...

GHSA-G4MX-Q9VG-27P4 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, az, py3-pipenv, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, jwt-tool, kubeflow-katib, py3-tensorflow-serving-api...

GHSA-G4MX-Q9VG-27P4 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kubeflow-katib, py3-tensorflow-serving-api, py3.13-scanner-test-libraries, k8s-sidecar, request-1276, az, nvidia-nsight-compute-13.2, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, nvidia-nsight-compute-13.1, jwt-tool, py3-pipenv...

CVE-2023-45803 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kubeflow-katib, py3-tensorflow-serving-api, py3.13-scanner-test-libraries, k8s-sidecar, request-1276, az, nvidia-nsight-compute-13.2, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, nvidia-nsight-compute-13.1, jwt-tool, py3-pipenv...

CVE-2023-45803 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, az, py3-pipenv, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, jwt-tool, kubeflow-katib, py3-tensorflow-serving-api...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2020-55182)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Tensorflow versions prior to 1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1, and 2.3.1, which stems from the program's failure to adequately perform path...

PYSEC-2020-129

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorFlow's SavedModel protocol buffer and altering the name of required keys results in segfaults and data corruption while loading the model. This can cause a denial of service in products using tensorflow-servin...

PYSEC-2020-321

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorFlow's SavedModel protocol buffer and altering the name of required keys results in segfaults and data corruption while loading the model. This can cause a denial of service in products using tensorflow-servin...

PT-2020-14277 · Google +1 · Tensorflow +1

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 1.15.4 TensorFlow versions prior to 2.0.3 TensorFlow versions prior to 2.1.2 TensorFlow versions prior to 2.2.1 TensorFlow versions prior to 2.3.1 Description: Changing the TensorFlow's SavedModel protocol buffer...