aimodelshare (>=0.0.157, <=0.1.0), aliby (>=0.1.18, <=0.1.55) +77 more potentially affected by CVE-2022-41899 via tensorflow (>=2.9.0, <=2.9.2)

tensorflow PYPI version =2.9.0, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.2.6, =0.0.1, =1.0.0, =1.1.0 and more Source cves: CVE-2022-41899 Source advisory: OSV:PYSEC-2026-3086...

aimodelshare (>=0.0.157, <=0.1.0), aliby (>=0.1.18, <=0.1.55) +77 more potentially affected by CVE-2022-41901 via tensorflow (>=2.9.0, <=2.9.2)

tensorflow PYPI version =2.9.0, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.2.6, =0.0.1, =1.0.0, =1.1.0 and more Source cves: CVE-2022-41901 Source advisory: OSV:PYSEC-2026-3185...

aimodelshare (>=0.0.157, <=0.1.0), aliby (>=0.1.18, <=0.1.55) +77 more potentially affected by CVE-2022-41900 via tensorflow (>=2.9.0, <=2.9.2)

tensorflow PYPI version =2.9.0, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.2.6, =0.0.1, =1.0.0, =1.1.0 and more Source cves: CVE-2022-41900 Source advisory: OSV:PYSEC-2026-3261...

a2grunnerp (>=0.1.0, <=0.1.8), aisdc (1.0.1) +43 more potentially affected by CVE-2022-41899 via tensorflow (2.10.0)

tensorflow PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - a2grunnerp =0.1.0, =0.1.1b2, =1.0.0, =0.1.0, =0.1.3, =1.0.0, =0.7.0, =1.0.0 - cv2-group 0.2.0 - decimer-segmentation 1.1.1 and more Source...

a2grunnerp (>=0.1.0, <=0.1.8), aisdc (1.0.1) +43 more potentially affected by CVE-2022-41901 via tensorflow (2.10.0)

tensorflow PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - a2grunnerp =0.1.0, =0.1.1b2, =1.0.0, =0.1.0, =0.1.3, =1.0.0, =0.7.0, =1.0.0 - cv2-group 0.2.0 - decimer-segmentation 1.1.1 and more Source...

a2grunnerp (>=0.1.0, <=0.1.8), aisdc (1.0.1) +43 more potentially affected by CVE-2022-41900 via tensorflow (2.10.0)

tensorflow PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - a2grunnerp =0.1.0, =0.1.1b2, =1.0.0, =0.1.0, =0.1.3, =1.0.0, =0.7.0, =1.0.0 - cv2-group 0.2.0 - decimer-segmentation 1.1.1 and more Source...

gamornet-cpu (>=0.2.3, <=0.4.3), tchatbot (0.1.0) +1 more potentially affected by CVE-2022-41899 via tensorflow-cpu (1.15.0)

tensorflow-cpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - gamornet-cpu =0.2.3, =0.7.0, =0.7.5 Source cves: CVE-2022-41899 Source advisory: OSV:PYSEC-2026-3264...

gamornet-cpu (>=0.2.3, <=0.4.3), tchatbot (0.1.0) +1 more potentially affected by CVE-2022-41898 via tensorflow-cpu (1.15.0)

tensorflow-cpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - gamornet-cpu =0.2.3, =0.7.0, =0.7.5 Source cves: CVE-2022-41898 Source advisory: OSV:PYSEC-2026-3340...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41899 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41899 Source advisory: OSV:PYSEC-2026-3264...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41898 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41898 Source advisory: OSV:PYSEC-2026-3340...

clip-jax (0.0.5), sdeper (>=1.1.0, <=1.6.1) potentially affected by CVE-2022-41899 via tensorflow-cpu (>=2.9.0, <=2.9.1)

tensorflow-cpu PYPI version =2.9.0, =1.1.0, =1.6.1 Source cves: CVE-2022-41899 Source advisory: OSV:PYSEC-2026-3264...

clip-jax (0.0.5), sdeper (>=1.1.0, <=1.6.1) potentially affected by CVE-2022-41898 via tensorflow-cpu (>=2.9.0, <=2.9.1)

tensorflow-cpu PYPI version =2.9.0, =1.1.0, =1.6.1 Source cves: CVE-2022-41898 Source advisory: OSV:PYSEC-2026-3340...

cifar-10-model (7.4.0), neuroutils (>=0.1.3, <=0.2.3) +1 more potentially affected by CVE-2022-41899 via tensorflow-cpu (2.10.0)

tensorflow-cpu PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - cifar-10-model 7.4.0 - neuroutils =0.1.3, =0.3.0.dev221212, =0.4.0.dev230202 Source cves: CVE-2022-41899 Source advisory:...

cifar-10-model (7.4.0), neuroutils (>=0.1.3, <=0.2.3) +1 more potentially affected by CVE-2022-41898 via tensorflow-cpu (2.10.0)

tensorflow-cpu PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - cifar-10-model 7.4.0 - neuroutils =0.1.3, =0.3.0.dev221212, =0.4.0.dev230202 Source cves: CVE-2022-41898 Source advisory:...

easyfacenet (>=1.0.4, <=1.0.5), keras-pandas (>=1.1.0, <=1.1.1) +3 more potentially affected by CVE-2022-41899 via tensorflow (1.7.0)

tensorflow PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - easyfacenet =1.0.4, =1.1.0, =0.1.1, =0.1.2, =0.0.0, =0.0.1 Source cves: CVE-2022-41899 Source advisory: OSV:PYSEC-2026-3086...

PYSEC-2026-3264 `CHECK` fail via inputs in `SdcaOptimizer`

Impact Inputs densefeatures or examplestatedata not of rank 2 will trigger a CHECK fail in SdcaOptimizer. python import tensorflow as tf tf.rawops.SdcaOptimizer sparseexampleindices=4 tf.random.uniform5,5,5,3, dtype=tf.dtypes.int64, maxval=100, sparsefeatureindices=4 tf.random.uniform5,5,5,3,...

PYSEC-2026-3383 FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess

Impact An input poolingratio that is smaller than 1 will trigger a heap OOB in tf.rawops.FractionalMaxPool and tf.rawops.FractionalAvgPool. Patches We have patched the issue in GitHub commit 216525144ee7c910296f5b05d214ca1327c9ce48. The fix will be included in TensorFlow 2.11.0. We will also cher...

`CHECK` fail via inputs in `SparseFillEmptyRowsGrad`

ImpactIf SparseFillEmptyRowsGrad is given empty inputs, TensorFlow will crash.pythonimport tensorflow as tftf.rawops.SparseFillEmptyRowsGrad reverseindexmap=, gradvalues=, name=None PatchesWe have patched the issue in GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8.The fix will be included...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41900 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41900 Source advisory: OSV:PYSEC-2026-3383...

gamornet-cpu (>=0.2.3, <=0.4.3), tchatbot (0.1.0) +1 more potentially affected by CVE-2022-41900 via tensorflow-cpu (1.15.0)

tensorflow-cpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - gamornet-cpu =0.2.3, =0.7.0, =0.7.5 Source cves: CVE-2022-41900 Source advisory: OSV:PYSEC-2026-3383...