es-distributed (0.1.0.dev0), strawberryfields (>=0.7.0, <=0.7.1) +1 more potentially affected by CVE-2022-29207 via tensorflow (1.3.0)

tensorflow PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - es-distributed 0.1.0.dev0 - strawberryfields =0.7.0, =0.7.1 - utensor-cgen 0.0.4 Source cves: CVE-2022-29207 Source advisory:...

fancy-nlp (>=0.0.1, <=0.0.4), nyoka (>=1.0.0, <=1.5.4) +3 more potentially affected by CVE-2022-29208 via tensorflow (1.9.0)

tensorflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - fancy-nlp =0.0.1, =1.0.0, =0.11.0, =0.5.4, =0.5.7 Source cves: CVE-2022-29208 Source advisory: OSV:PYSEC-2026-3088...

accuinsight (1.0.1), aimodelshare (0.1.52) +85 more potentially affected by CVE-2022-29207 via tensorflow (1.13.1)

tensorflow PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - accuinsight 1.0.1 - aimodelshare 0.1.52 - alibi =0.5.0, =0.1.0, =19.3.0, =1.0.1, =1.1.0, =0.0.1, =0.3.4, =0.1.0, =0.0.1, =0.0.3 and more...

acuity (6.18.0), acuitylite (>=6.6.0, <=6.21.0) +60 more potentially affected by CVE-2022-29209 via tensorflow (2.8.0)

tensorflow PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - acuity 6.18.0 - acuitylite =6.6.0, =1.2.8, =1.0.43, =0.2.2, =0.0.1, =0.0.2, =0.2.8, =0.14.0, =0.1.3, =0.0.9, =0.2.27, =0.2.41 -...

axelerate (>=0.5.2, <=0.5.5), bert-experimental (1.0.0) +24 more potentially affected by CVE-2022-29207 via tensorflow (1.15.2)

tensorflow PYPI version 1.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - axelerate =0.5.2, =2.0.1, =1.0.1, =0.1.0.dev1, =1.5.0.dev20210429, =1.5.0.dev20210512 - fedlearner-manylinux 1.5.0.dev20210429 -...

cde (>=0.1.0, <=0.2.0.1), nerlogparser (0.0.1) +1 more potentially affected by CVE-2022-29209 via tensorflow (1.4.1)

tensorflow PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cde =0.1.0, =0.1.7, =0.3.2 Source cves: CVE-2022-29209 Source advisory: OSV:PYSEC-2026-3167...

program-synthesis (0.1.2), qfragment (0.0.16) potentially affected by CVE-2022-29208 via tensorflow (1.5.1)

tensorflow PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - program-synthesis 0.1.2 - qfragment 0.0.16 Source cves: CVE-2022-29208 Source advisory: OSV:PYSEC-2026-3088...

hyperparameter-hunter (>=0.0.1, <=1.0.1), malaya (>=0.6.0.2, <=0.6.4) +2 more potentially affected by CVE-2022-29207 via tensorflow (1.5.0)

tensorflow PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - hyperparameter-hunter =0.0.1, =0.6.0.2, =1.3.6, =1.3.7 - talos 0.6.4 Source cves: CVE-2022-29207 Source advisory: OSV:PYSEC-2026-3112...

PYSEC-2026-3167 Type confusion leading to `CHECK`-failure based denial of service in TensorFlow

Impact The macros that TensorFlow uses for writing assertions e.g., CHECKLT, CHECKGT, etc. have an incorrect logic when comparing sizet and int values. Due to type conversion rules, several of the macros would trigger incorrectly. Patches We have patched the issue in GitHub commit...

animalai-train (0.4.0), mlagents (>=0.4.0, <=0.10.0.dev0) +2 more potentially affected by CVE-2022-29211 via tensorflow (1.7.1)

tensorflow PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train 0.4.0 - mlagents =0.4.0, =0.10.0.dev0 - pytransdec 0.2.1 - unityagents 0.4.0 Source cves: CVE-2022-29211 Source advisory:...

easyfacenet (>=1.0.4, <=1.0.5), keras-pandas (>=1.1.0, <=1.1.1) +3 more potentially affected by CVE-2022-29211 via tensorflow (1.7.0)

tensorflow PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - easyfacenet =1.0.4, =1.1.0, =0.1.1, =0.1.2, =0.0.0, =0.0.1 Source cves: CVE-2022-29211 Source advisory: OSV:PYSEC-2026-3260...

cellunet (>=0.1.0, <=0.2.2), color2vec (1.0.0) +12 more potentially affected by CVE-2022-29211 via tensorflow (1.8.0)

tensorflow PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cellunet =0.1.0, =0.0.5.1, =0.1.0, =0.1.1.1, =1.1.0, =0.9.0a7, =0.1.0, =0.11.0, =0.4.1, =0.5.2, =0.5.5 Source cves: CVE-2022-29211 Source...

sklearn-plus (>=0.0.3, <=0.0.4) potentially affected by CVE-2022-29211 via tensorflow (1.2.0)

tensorflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - sklearn-plus =0.0.3, =0.0.4 Source cves: CVE-2022-29211 Source advisory: OSV:PYSEC-2026-3260...

adpred (>=1.1.2, <=1.2.7), aix360 (>=0.2.0, <=0.2.1) +73 more potentially affected by CVE-2022-29211 via tensorflow (1.14.0)

tensorflow PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - adpred =1.1.2, =0.2.0, =1.0.4, =0.1.1, =1.0.2, =0.0.4, =0.1.0, =0.92.0, =0.12.0, =0.22.0 and more Source cves: CVE-2022-29211 Source...

fancy-nlp (>=0.0.1, <=0.0.4), nyoka (>=1.0.0, <=1.5.4) +3 more potentially affected by CVE-2022-29211 via tensorflow (1.9.0)

tensorflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - fancy-nlp =0.0.1, =1.0.0, =0.11.0, =0.5.4, =0.5.7 Source cves: CVE-2022-29211 Source advisory: OSV:PYSEC-2026-3260...

azureml-contrib-brainwave (0.1.68.2), azureml-train-automl (>=0.1.68, <=0.1.80) +5 more potentially affected by CVE-2022-29211 via tensorflow (1.10.0)

tensorflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-contrib-brainwave 0.1.68.2 - azureml-train-automl =0.1.68, =2.0.3, =0.11.9, =0.13.0a5 - scaden 0.9.0 Source cves: CVE-2022-29211...

azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2022-29211 via tensorflow (1.11.0)

tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2022-29211 Source advisory: OSV:PYSEC-2026-3260...

aether (>=0.3.26, <=0.3.32), animalai-train (>=0.4.2, <=0.5.0) +26 more potentially affected by CVE-2022-29211 via tensorflow (1.12.0)

tensorflow PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aether =0.3.26, =0.4.2, =1.0.17.1, =0.1.0, =0.3.1, =0.1.0, =0.0.1, =1.0.0, =0.7.0, =0.8.0 and more Source cves: CVE-2022-29211 Source...

aether (>=0.3.26, <=0.3.32), animalai-train (>=0.4.2, <=0.5.0) +26 more potentially affected by CVE-2022-29207 via tensorflow (1.12.0)

tensorflow PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aether =0.3.26, =0.4.2, =1.0.17.1, =0.1.0, =0.3.1, =0.1.0, =0.0.1, =1.0.0, =0.7.0, =0.8.0 and more Source cves: CVE-2022-29207 Source...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), medaka-cpu (1.5.0) +4 more potentially affected by CVE-2022-29209 via tensorflow-cpu (>=2.1.0, <=2.5.3)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.5.1, =0.102.0.dev0, =1.5.2, =1.7.4 Source cves: CVE-2022-29209 Source advisory: OSV:PYSEC-2026-3315...