c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41902 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41902 Source advisory: OSV:PYSEC-2026-3310...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41908 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41908 Source advisory: OSV:PYSEC-2026-3353...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41909 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41909 Source advisory: OSV:PYSEC-2026-3368...

clip-jax (0.0.5), sdeper (>=1.1.0, <=1.6.1) potentially affected by CVE-2022-41907 via tensorflow-cpu (>=2.9.0, <=2.9.1)

tensorflow-cpu PYPI version =2.9.0, =1.1.0, =1.6.1 Source cves: CVE-2022-41907 Source advisory: OSV:PYSEC-2026-3268...

clip-jax (0.0.5), sdeper (>=1.1.0, <=1.6.1) potentially affected by CVE-2022-41902 via tensorflow-cpu (>=2.9.0, <=2.9.1)

tensorflow-cpu PYPI version =2.9.0, =1.1.0, =1.6.1 Source cves: CVE-2022-41902 Source advisory: OSV:PYSEC-2026-3310...

clip-jax (0.0.5), sdeper (>=1.1.0, <=1.6.1) potentially affected by CVE-2022-41908 via tensorflow-cpu (>=2.9.0, <=2.9.1)

tensorflow-cpu PYPI version =2.9.0, =1.1.0, =1.6.1 Source cves: CVE-2022-41908 Source advisory: OSV:PYSEC-2026-3353...

clip-jax (0.0.5), sdeper (>=1.1.0, <=1.6.1) potentially affected by CVE-2022-41909 via tensorflow-cpu (>=2.9.0, <=2.9.1)

tensorflow-cpu PYPI version =2.9.0, =1.1.0, =1.6.1 Source cves: CVE-2022-41909 Source advisory: OSV:PYSEC-2026-3368...

cifar-10-model (7.4.0), neuroutils (>=0.1.3, <=0.2.3) +1 more potentially affected by CVE-2022-41907 via tensorflow-cpu (2.10.0)

tensorflow-cpu PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - cifar-10-model 7.4.0 - neuroutils =0.1.3, =0.3.0.dev221212, =0.4.0.dev230202 Source cves: CVE-2022-41907 Source advisory:...

cifar-10-model (7.4.0), neuroutils (>=0.1.3, <=0.2.3) +1 more potentially affected by CVE-2022-41902 via tensorflow-cpu (2.10.0)

tensorflow-cpu PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - cifar-10-model 7.4.0 - neuroutils =0.1.3, =0.3.0.dev221212, =0.4.0.dev230202 Source cves: CVE-2022-41902 Source advisory:...

cifar-10-model (7.4.0), neuroutils (>=0.1.3, <=0.2.3) +1 more potentially affected by CVE-2022-41908 via tensorflow-cpu (2.10.0)

tensorflow-cpu PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - cifar-10-model 7.4.0 - neuroutils =0.1.3, =0.3.0.dev221212, =0.4.0.dev230202 Source cves: CVE-2022-41908 Source advisory:...

cifar-10-model (7.4.0), neuroutils (>=0.1.3, <=0.2.3) +1 more potentially affected by CVE-2022-41909 via tensorflow-cpu (2.10.0)

tensorflow-cpu PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - cifar-10-model 7.4.0 - neuroutils =0.1.3, =0.3.0.dev221212, =0.4.0.dev230202 Source cves: CVE-2022-41909 Source advisory:...

`CHECK` fail via inputs in `PyFunc`

ImpactAn input token that is not a UTF-8 bytestring will trigger a CHECK fail in tf.rawops.PyFunc.pythonimport tensorflow as tfvalue = tf.constantvalue=1,2token = b'\xb0'dataType = tf.int32tf.rawops.PyFuncinput=value,token=token,Tout=dataType PatchesWe have patched the issue in GitHub commit...

PYSEC-2026-3268 Overflow in `ResizeNearestNeighborGrad`

Impact When tf.rawops.ResizeNearestNeighborGrad is given a large size input, it overflows. import tensorflow as tf aligncorners = True halfpixelcenters = False grads = tf.constant1, shape=1,8,16,3, dtype=tf.float16 size = tf.constant1879048192,1879048192, shape=2, dtype=tf.int32...

cde (>=0.1.0, <=0.2.0.1), nerlogparser (0.0.1) +1 more potentially affected by CVE-2022-41908 via tensorflow (1.4.1)

tensorflow PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cde =0.1.0, =0.1.7, =0.3.2 Source cves: CVE-2022-41908 Source advisory: OSV:PYSEC-2026-3217...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41901 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41901 Source advisory: OSV:PYSEC-2026-3328...

gamornet-cpu (>=0.2.3, <=0.4.3), tchatbot (0.1.0) +1 more potentially affected by CVE-2022-41901 via tensorflow-cpu (1.15.0)

tensorflow-cpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - gamornet-cpu =0.2.3, =0.7.0, =0.7.5 Source cves: CVE-2022-41901 Source advisory: OSV:PYSEC-2026-3328...

clip-jax (0.0.5), sdeper (>=1.1.0, <=1.6.1) potentially affected by CVE-2022-41901 via tensorflow-cpu (>=2.9.0, <=2.9.1)

tensorflow-cpu PYPI version =2.9.0, =1.1.0, =1.6.1 Source cves: CVE-2022-41901 Source advisory: OSV:PYSEC-2026-3328...

cifar-10-model (7.4.0), neuroutils (>=0.1.3, <=0.2.3) +1 more potentially affected by CVE-2022-41901 via tensorflow-cpu (2.10.0)

tensorflow-cpu PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - cifar-10-model 7.4.0 - neuroutils =0.1.3, =0.3.0.dev221212, =0.4.0.dev230202 Source cves: CVE-2022-41901 Source advisory:...

chicksexer (0.2.2), gender-detection (0.2.2) +2 more potentially affected by CVE-2022-41908 via tensorflow (1.0.1)

tensorflow PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - chicksexer 0.2.2 - gender-detection 0.2.2 - moodleinspire 0.0.10 - moodlemlbackend =0.0.2, =1.0.0 Source cves: CVE-2022-41908 Source advisor...

Out of bounds write in grappler in Tensorflow

ImpactThe function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. PatchesWe have patched the issue in GitHub commit...