mlbench-core (>=2.4.0.dev276, <=2.4.0.dev279), openml-keras (0.0.0) +8 more potentially affected by CVE-2022-23582 via tensorflow (1.13.2)

tensorflow PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - mlbench-core =2.4.0.dev276, =0.1.0, =0.4.0, =0.14.0, =0.1.4, =0.3.0, =0.3.4 - rasa-print 0.3.1 Source cves: CVE-2022-23582 Source advisory:...

Integer overflow in Tensorflow

ImpactThe implementation of OpLevelCostEstimator::CalculateTensorSize is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements:ccint64t OpLevelCostEstimator::CalculateTensorSize const OpInfo::TensorProperties&...

alwakeupword (1.0.0), armadillin (>=0.0.2, <=0.53.0) +33 more potentially affected by CVE-2022-23583 via tensorflow (>=2.6.0, <=2.6.2)

tensorflow PYPI version =2.6.0, =0.0.2, =1.0.1, =0.0.9, =0.2.0, =4.5.2, =1.1.2, =0.2.0, =0.0.1, =0.1.5, =1.0.3, =1.0.6 and more Source cves: CVE-2022-23583 Source advisory: OSV:PYSEC-2026-3191...

aether (>=0.3.26, <=0.3.32), animalai-train (>=0.4.2, <=0.5.0) +26 more potentially affected by CVE-2022-23583 via tensorflow (1.12.0)

tensorflow PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aether =0.3.26, =0.4.2, =1.0.17.1, =0.1.0, =0.3.1, =0.1.0, =0.0.1, =1.0.0, =0.7.0, =0.8.0 and more Source cves: CVE-2022-23583 Source...

Null-dereference in Tensorflow

ImpactThe implementation of GetInitOp is vulnerable to a crash caused by dereferencing a null pointer:ccconst auto& initopsigit = metagraphdef.signaturedef.findkSavedModelInitOpSignatureKey;if initopsigit != sigdefmap.end initopname = initopsigit-second.outputs .findkSavedModelInitOpSignatureKey...

mlbench-core (>=2.4.0.dev276, <=2.4.0.dev279), openml-keras (0.0.0) +8 more potentially affected by CVE-2022-23575 via tensorflow (1.13.2)

tensorflow PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - mlbench-core =2.4.0.dev276, =0.1.0, =0.4.0, =0.14.0, =0.1.4, =0.3.0, =0.3.4 - rasa-print 0.3.1 Source cves: CVE-2022-23575 Source advisory:...

diluvian (>=0.0.2, <=0.0.3), guesslang (>=0.9.0rc5, <=0.9.1) +3 more potentially affected by CVE-2022-23576 via tensorflow (1.1.0)

tensorflow PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - diluvian =0.0.2, =0.9.0rc5, =0.9.1 - impyute 0.0.4 - rldqn 0.0.5 - russtress 0.1.0 Source cves: CVE-2022-23576 Source advisory:...

axelerate (>=0.5.2, <=0.5.5), bert-experimental (1.0.0) +24 more potentially affected by CVE-2022-23579 via tensorflow (1.15.2)

tensorflow PYPI version 1.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - axelerate =0.5.2, =2.0.1, =1.0.1, =0.1.0.dev1, =1.5.0.dev20210429, =1.5.0.dev20210512 - fedlearner-manylinux 1.5.0.dev20210429 -...

keras-pandas (>=1.1.2, <=2.0.1), learna-tools (0.1.0) potentially affected by CVE-2022-23575 via tensorflow (1.4.0)

tensorflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - keras-pandas =1.1.2, =2.0.1 - learna-tools 0.1.0 Source cves: CVE-2022-23575 Source advisory: OSV:PYSEC-2026-3160...

keras-pandas (>=1.1.2, <=2.0.1), learna-tools (0.1.0) potentially affected by CVE-2022-23582 via tensorflow (1.4.0)

tensorflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - keras-pandas =1.1.2, =2.0.1 - learna-tools 0.1.0 Source cves: CVE-2022-23582 Source advisory: OSV:PYSEC-2026-3100...

animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2022-23582 via tensorflow (1.12.2)

tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2022-23582 Source advisory: OSV:PYSEC-2026-3100...

animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2022-21735 via tensorflow (1.12.2)

tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2022-21735 Source advisory: OSV:PYSEC-2026-3134...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2022-23579 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2022-23579...

cellunet (>=0.1.0, <=0.2.2), color2vec (1.0.0) +12 more potentially affected by CVE-2022-23579 via tensorflow (1.8.0)

tensorflow PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cellunet =0.1.0, =0.0.5.1, =0.1.0, =0.1.1.1, =1.1.0, =0.9.0a7, =0.1.0, =0.11.0, =0.4.1, =0.5.2, =0.5.5 Source cves: CVE-2022-23579 Source...

cellunet (>=0.1.0, <=0.2.2), color2vec (1.0.0) +12 more potentially affected by CVE-2022-23577 via tensorflow (1.8.0)

tensorflow PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cellunet =0.1.0, =0.0.5.1, =0.1.0, =0.1.1.1, =1.1.0, =0.9.0a7, =0.1.0, =0.11.0, =0.4.1, =0.5.2, =0.5.5 Source cves: CVE-2022-23577 Source...

asc (>=0.1.0, <=0.3.1), openats (>=0.0.0.dev1, <=0.0.0.dev37) potentially affected by CVE-2022-23575 via tensorflow (1.2.1)

tensorflow PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - asc =0.1.0, =0.0.0.dev1, =0.0.0.dev37 Source cves: CVE-2022-23575 Source advisory: OSV:PYSEC-2026-3160...

`CHECK`-failures in binary ops in Tensorflow

ImpactA malicious user can cause a denial of service by altering a SavedModel such that any binary op would trigger CHECK failures. This occurs when the protobuf part corresponding to the tensor arguments is modified such that the dtype no longer matches the dtype expected by the op. In that case...

es-distributed (0.1.0.dev0), strawberryfields (>=0.7.0, <=0.7.1) +1 more potentially affected by CVE-2022-23578 via tensorflow (1.3.0)

tensorflow PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - es-distributed 0.1.0.dev0 - strawberryfields =0.7.0, =0.7.1 - utensor-cgen 0.0.4 Source cves: CVE-2022-23578 Source advisory:...

adpred (>=1.1.2, <=1.2.7), aix360 (>=0.2.0, <=0.2.1) +73 more potentially affected by CVE-2022-23578 via tensorflow (1.14.0)

tensorflow PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - adpred =1.1.2, =0.2.0, =1.0.4, =0.1.1, =1.0.2, =0.0.4, =0.1.0, =0.92.0, =0.12.0, =0.22.0 and more Source cves: CVE-2022-23578 Source...

cf-nlp (>=0.1.0, <=0.1.1), dlgo (0.2.0) +2 more potentially affected by CVE-2022-21735 via tensorflow (1.10.1)

tensorflow PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cf-nlp =0.1.0, =0.6.0, =0.6.1 Source cves: CVE-2022-21735 Source advisory: OSV:PYSEC-2026-3134...