diluvian (>=0.0.2, <=0.0.3), guesslang (>=0.9.0rc5, <=0.9.1) +3 more potentially affected by CVE-2022-41902 via tensorflow (1.1.0)

tensorflow PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - diluvian =0.0.2, =0.9.0rc5, =0.9.1 - impyute 0.0.4 - rldqn 0.0.5 - russtress 0.1.0 Source cves: CVE-2022-41902 Source advisory:...

hyperparameter-hunter (>=0.0.1, <=1.0.1), malaya (>=0.6.0.2, <=0.6.4) +2 more potentially affected by CVE-2022-41902 via tensorflow (1.5.0)

tensorflow PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - hyperparameter-hunter =0.0.1, =0.6.0.2, =1.3.6, =1.3.7 - talos 0.6.4 Source cves: CVE-2022-41902 Source advisory: OSV:PYSEC-2026-3161...

keras-pandas (>=1.1.2, <=2.0.1), learna-tools (0.1.0) potentially affected by CVE-2022-41902 via tensorflow (1.4.0)

tensorflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - keras-pandas =1.1.2, =2.0.1 - learna-tools 0.1.0 Source cves: CVE-2022-41902 Source advisory: OSV:PYSEC-2026-3161...

PYSEC-2026-3161 Out of bounds write in grappler in Tensorflow

Impact The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. Patches We have patched the issue in GitHub commit...

cde (>=0.1.0, <=0.2.0.1), nerlogparser (0.0.1) +1 more potentially affected by CVE-2022-41902 via tensorflow (1.4.1)

tensorflow PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cde =0.1.0, =0.1.7, =0.3.2 Source cves: CVE-2022-41902 Source advisory: OSV:PYSEC-2026-3161...

PYSEC-2026-3268 Overflow in `ResizeNearestNeighborGrad`

Impact When tf.rawops.ResizeNearestNeighborGrad is given a large size input, it overflows. import tensorflow as tf aligncorners = True halfpixelcenters = False grads = tf.constant1, shape=1,8,16,3, dtype=tf.float16 size = tf.constant1879048192,1879048192, shape=2, dtype=tf.int32...

cde (>=0.1.0, <=0.2.0.1), nerlogparser (0.0.1) +1 more potentially affected by CVE-2022-41908 via tensorflow (1.4.1)

tensorflow PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cde =0.1.0, =0.1.7, =0.3.2 Source cves: CVE-2022-41908 Source advisory: OSV:PYSEC-2026-3217...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41901 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41901 Source advisory: OSV:PYSEC-2026-3328...

gamornet-cpu (>=0.2.3, <=0.4.3), tchatbot (0.1.0) +1 more potentially affected by CVE-2022-41901 via tensorflow-cpu (1.15.0)

tensorflow-cpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - gamornet-cpu =0.2.3, =0.7.0, =0.7.5 Source cves: CVE-2022-41901 Source advisory: OSV:PYSEC-2026-3328...

clip-jax (0.0.5), sdeper (>=1.1.0, <=1.6.1) potentially affected by CVE-2022-41901 via tensorflow-cpu (>=2.9.0, <=2.9.1)

tensorflow-cpu PYPI version =2.9.0, =1.1.0, =1.6.1 Source cves: CVE-2022-41901 Source advisory: OSV:PYSEC-2026-3328...

cifar-10-model (7.4.0), neuroutils (>=0.1.3, <=0.2.3) +1 more potentially affected by CVE-2022-41901 via tensorflow-cpu (2.10.0)

tensorflow-cpu PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - cifar-10-model 7.4.0 - neuroutils =0.1.3, =0.3.0.dev221212, =0.4.0.dev230202 Source cves: CVE-2022-41901 Source advisory:...

chicksexer (0.2.2), gender-detection (0.2.2) +2 more potentially affected by CVE-2022-41908 via tensorflow (1.0.1)

tensorflow PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - chicksexer 0.2.2 - gender-detection 0.2.2 - moodleinspire 0.0.10 - moodlemlbackend =0.0.2, =1.0.0 Source cves: CVE-2022-41908 Source advisor...

Out of bounds write in grappler in Tensorflow

ImpactThe function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. PatchesWe have patched the issue in GitHub commit...

easyfacenet (>=1.0.4, <=1.0.5), keras-pandas (>=1.1.0, <=1.1.1) +3 more potentially affected by CVE-2022-41909 via tensorflow (1.7.0)

tensorflow PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - easyfacenet =1.0.4, =1.1.0, =0.1.1, =0.1.2, =0.0.0, =0.0.1 Source cves: CVE-2022-41909 Source advisory: OSV:PYSEC-2026-3238...

Segfault in `CompositeTensorVariantToComponents`

ImpactAn input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault in tf.rawops.CompositeTensorVariantToComponents.pythonimport tensorflow as tfencode = tf.rawops.EmptyTensorListelementdtype=tf.int32, elementshape=10, 15, maxnumelements=2meta=...

PYSEC-2026-3328 `CHECK_EQ` fail via input in `SparseMatrixNNZ`

Impact An input sparsematrix that is not a matrix with a shape with rank 0 will trigger a CHECK fail in tf.rawops.SparseMatrixNNZ. python import tensorflow as tf tf.rawops.SparseMatrixNNZsparsematrix= Patches We have patched the issue in GitHub commit f856d02e5322821aad155dad9b3acab1e9f5d693. The...

`CHECK` fail via inputs in `PyFunc`

ImpactAn input token that is not a UTF-8 bytestring will trigger a CHECK fail in tf.rawops.PyFunc.pythonimport tensorflow as tfvalue = tf.constantvalue=1,2token = b'\xb0'dataType = tf.int32tf.rawops.PyFuncinput=value,token=token,Tout=dataType PatchesWe have patched the issue in GitHub commit...

Overflow in `ResizeNearestNeighborGrad`

ImpactWhen tf.rawops.ResizeNearestNeighborGrad is given a large size input, it overflows.import tensorflow as tfaligncorners = Truehalfpixelcenters = Falsegrads = tf.constant1, shape=1,8,16,3, dtype=tf.float16size = tf.constant1879048192,1879048192, shape=2,...

PYSEC-2026-3091 Overflow in `ResizeNearestNeighborGrad`

Impact When tf.rawops.ResizeNearestNeighborGrad is given a large size input, it overflows. import tensorflow as tf aligncorners = True halfpixelcenters = False grads = tf.constant1, shape=1,8,16,3, dtype=tf.float16 size = tf.constant1879048192,1879048192, shape=2, dtype=tf.int32...

Segfault in `CompositeTensorVariantToComponents`

ImpactAn input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault in tf.rawops.CompositeTensorVariantToComponents.pythonimport tensorflow as tfencode = tf.rawops.EmptyTensorListelementdtype=tf.int32, elementshape=10, 15, maxnumelements=2meta=...