abmarl (>=0.1.1, <=0.1.3), accuinsight (>=1.0.47, <=3.0.0) +472 more potentially affected by CVE-2022-23591 via tensorflow (>=2.0.0, <=2.5.2)

tensorflow PYPI version =2.0.0, =0.1.1, =1.0.47, =1.0.0, =1.2.0, =1.1.5, =0.0.1, =2.1.0, =0.5.6, =0.5.0, =0.1.0, =0.1.8 and more Source cves: CVE-2022-23591 Source advisory: OSV:PYSEC-2026-3084...

abmarl (>=0.1.1, <=0.1.3), accuinsight (>=1.0.47, <=3.0.0) +472 more potentially affected by CVE-2022-23589 via tensorflow (>=2.0.0, <=2.5.2)

tensorflow PYPI version =2.0.0, =0.1.1, =1.0.47, =1.0.0, =1.2.0, =1.1.5, =0.0.1, =2.1.0, =0.5.6, =0.5.0, =0.1.0, =0.1.8 and more Source cves: CVE-2022-23589 Source advisory: OSV:PYSEC-2026-3154...

abmarl (>=0.1.1, <=0.1.3), accuinsight (>=1.0.47, <=3.0.0) +472 more potentially affected by CVE-2022-23571 via tensorflow (>=2.0.0, <=2.5.2)

tensorflow PYPI version =2.0.0, =0.1.1, =1.0.47, =1.0.0, =1.2.0, =1.1.5, =0.0.1, =2.1.0, =0.5.6, =0.5.0, =0.1.0, =0.1.8 and more Source cves: CVE-2022-23571 Source advisory: OSV:PYSEC-2026-3204...

abmarl (>=0.1.1, <=0.1.3), accuinsight (>=1.0.47, <=3.0.0) +472 more potentially affected by CVE-2022-23572 via tensorflow (>=2.0.0, <=2.5.2)

tensorflow PYPI version =2.0.0, =0.1.1, =1.0.47, =1.0.0, =1.2.0, =1.1.5, =0.0.1, =2.1.0, =0.5.6, =0.5.0, =0.1.0, =0.1.8 and more Source cves: CVE-2022-23572 Source advisory: OSV:PYSEC-2026-3241...

alwakeupword (1.0.0), armadillin (>=0.0.2, <=0.53.0) +32 more potentially affected by CVE-2022-23591 via tensorflow (>=2.6.0, <=2.6.2)

tensorflow PYPI version =2.6.0, =0.0.2, =1.0.1, =0.2.0, =4.5.2, =1.1.2, =0.2.0, =0.0.1, =0.1.5, =1.0.3, =0.10.27, =0.11.10 and more Source cves: CVE-2022-23591 Source advisory: OSV:PYSEC-2026-3084...

alwakeupword (1.0.0), armadillin (>=0.0.2, <=0.53.0) +32 more potentially affected by CVE-2022-23589 via tensorflow (>=2.6.0, <=2.6.2)

tensorflow PYPI version =2.6.0, =0.0.2, =1.0.1, =0.2.0, =4.5.2, =1.1.2, =0.2.0, =0.0.1, =0.1.5, =1.0.3, =0.10.27, =0.11.10 and more Source cves: CVE-2022-23589 Source advisory: OSV:PYSEC-2026-3154...

alwakeupword (1.0.0), armadillin (>=0.0.2, <=0.53.0) +32 more potentially affected by CVE-2022-23571 via tensorflow (>=2.6.0, <=2.6.2)

tensorflow PYPI version =2.6.0, =0.0.2, =1.0.1, =0.2.0, =4.5.2, =1.1.2, =0.2.0, =0.0.1, =0.1.5, =1.0.3, =0.10.27, =0.11.10 and more Source cves: CVE-2022-23571 Source advisory: OSV:PYSEC-2026-3204...

alwakeupword (1.0.0), armadillin (>=0.0.2, <=0.53.0) +32 more potentially affected by CVE-2022-23572 via tensorflow (>=2.6.0, <=2.6.2)

tensorflow PYPI version =2.6.0, =0.0.2, =1.0.1, =0.2.0, =4.5.2, =1.1.2, =0.2.0, =0.0.1, =0.1.5, =1.0.3, =0.10.27, =0.11.10 and more Source cves: CVE-2022-23572 Source advisory: OSV:PYSEC-2026-3241...

aadhaar-detection (0.5.0), abmarl (>=0.1.1, <=0.1.3) +552 more potentially affected by CVE-2022-23590 via tensorflow (>=2.0.0, <=2.7.0)

tensorflow PYPI version =2.0.0, =0.1.1, =1.0.47, =1.0.0, =1.2.0, =1.1.5, =0.0.1, =2.1.0, =0.1.11, =0.1.11, =0.1.20 - aisaratuners 1.4.2 and more Source cves: CVE-2022-23590 Source advisory: OSV:PYSEC-2026-3225...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +33 more potentially affected by CVE-2022-23591 via tensorflow (2.7.0)

tensorflow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =3.0.22, =0.1.11, =0.1.11, =0.1.11, =0.1.0, =0.0.1, =0.1.5.dev202303131412, =0.1.0, =0.1.1 an...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +33 more potentially affected by CVE-2022-23589 via tensorflow (2.7.0)

tensorflow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =3.0.22, =0.1.11, =0.1.11, =0.1.11, =0.1.0, =0.0.1, =0.1.5.dev202303131412, =0.1.0, =0.1.1 an...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +33 more potentially affected by CVE-2022-23594 via tensorflow (2.7.0)

tensorflow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =3.0.22, =0.1.11, =0.1.11, =0.1.11, =0.1.0, =0.0.1, =0.1.5.dev202303131412, =0.1.0, =0.1.1 an...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +33 more potentially affected by CVE-2022-23571 via tensorflow (2.7.0)

tensorflow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =3.0.22, =0.1.11, =0.1.11, =0.1.11, =0.1.0, =0.0.1, =0.1.5.dev202303131412, =0.1.0, =0.1.1 an...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +33 more potentially affected by CVE-2022-23572 via tensorflow (2.7.0)

tensorflow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =3.0.22, =0.1.11, =0.1.11, =0.1.11, =0.1.0, =0.0.1, =0.1.5.dev202303131412, =0.1.0, =0.1.1 an...

model-template (0.0.12), tensorflow-text (>=2.7.0rc0, <=2.7.0rc1) potentially affected by CVE-2022-23593 via tensorflow (>=2.8.0rc0, <=2.8.0rc1)

tensorflow PYPI version =2.8.0rc0, =2.7.0rc0, =2.7.0rc1 Source cves: CVE-2022-23593 Source advisory: OSV:PYSEC-2026-3193...

model-template (0.0.12), tensorflow-text (>=2.7.0rc0, <=2.7.0rc1) potentially affected by CVE-2022-23592 via tensorflow (>=2.8.0rc0, <=2.8.0rc1)

tensorflow PYPI version =2.8.0rc0, =2.7.0rc0, =2.7.0rc1 Source cves: CVE-2022-23592 Source advisory: OSV:PYSEC-2026-3249...

lsmmdma (>=0.0.4, <=0.1.7), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23594 via tensorflow-cpu (2.7.0)

tensorflow-cpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - lsmmdma =0.0.4, =0.1.7 - tpu-tf2 1.0.0 Source cves: CVE-2022-23594 Source advisory: OSV:PYSEC-2026-3309...

PYSEC-2026-3241 Crash when type cannot be specialized in Tensorflow

Impact Under certain scenarios, TensorFlow can fail to specialize a type during shape inference: cc void InferenceContext::PreInputInit const OpDef& opdef, const std::vector& inputtensors, const std::vector& inputtensorsasshapes const auto ret = fulltype::SpecializeTypeattrs, opdef;...

PYSEC-2026-3309 Out of bounds read in Tensorflow

Impact The TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect. If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can...

Out of bounds read in Tensorflow

ImpactThe TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect.If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can caus...