classitransformers (0.0.1), pyclue (>=0.1.0, <=0.1.2) +4 more potentially affected by CVE-2023-25660 via tensorflow-gpu (1.15.2)

tensorflow-gpu PYPI version 1.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - classitransformers 0.0.1 - pyclue =0.1.0, =0.1.1, =0.1.2, =0.1.2, =0.1.3 Source cves: CVE-2023-25660 Source advisory:...

verse16 (>=0.1.1, <=0.1.2) potentially affected by CVE-2023-25660 via tensorflow-gpu (1.15.3)

tensorflow-gpu PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - verse16 =0.1.1, =0.1.2 Source cves: CVE-2023-25660 Source advisory: OSV:PYSEC-2026-1963...

verse16 (>=0.1.1, <=0.1.2) potentially affected by CVE-2023-25662 via tensorflow-gpu (1.15.3)

tensorflow-gpu PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - verse16 =0.1.1, =0.1.2 Source cves: CVE-2023-25662 Source advisory: OSV:PYSEC-2026-1958...

verse16 (>=0.1.1, <=0.1.2) potentially affected by CVE-2023-25659 via tensorflow-gpu (1.15.3)

tensorflow-gpu PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - verse16 =0.1.1, =0.1.2 Source cves: CVE-2023-25659 Source advisory: OSV:PYSEC-2026-1959...

verse16 (>=0.1.1, <=0.1.2) potentially affected by CVE-2023-25665 via tensorflow-gpu (1.15.3)

tensorflow-gpu PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - verse16 =0.1.1, =0.1.2 Source cves: CVE-2023-25665 Source advisory: OSV:PYSEC-2026-1956...

vcap (>=0.2.4.dev13, <=0.3.1) potentially affected by CVE-2023-25665 via tensorflow-gpu (1.15.4)

tensorflow-gpu PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - vcap =0.2.4.dev13, =0.3.1 Source cves: CVE-2023-25665 Source advisory: OSV:PYSEC-2026-1956...

vcap (>=0.2.4.dev13, <=0.3.1) potentially affected by CVE-2023-25662 via tensorflow-gpu (1.15.4)

tensorflow-gpu PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - vcap =0.2.4.dev13, =0.3.1 Source cves: CVE-2023-25662 Source advisory: OSV:PYSEC-2026-1958...

vcap (>=0.2.4.dev13, <=0.3.1) potentially affected by CVE-2023-25659 via tensorflow-gpu (1.15.4)

tensorflow-gpu PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - vcap =0.2.4.dev13, =0.3.1 Source cves: CVE-2023-25659 Source advisory: OSV:PYSEC-2026-1959...

vcap (>=0.2.4.dev13, <=0.3.1) potentially affected by CVE-2023-25660 via tensorflow-gpu (1.15.4)

tensorflow-gpu PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - vcap =0.2.4.dev13, =0.3.1 Source cves: CVE-2023-25660 Source advisory: OSV:PYSEC-2026-1963...

aggmap (>=1.1.1, <=1.2.1), animl (>=1.1.2, <=1.1.4) +55 more potentially affected by CVE-2023-25662 via tensorflow-gpu (>=2.0.0, <=2.10.1)

tensorflow-gpu PYPI version =2.0.0, =1.1.1, =1.1.2, =0.0.1, =0.0.9, =0.2.1, =0.1.0, =0.0.4, =1.1.1, =1.1.0, =1.4.0 and more Source cves: CVE-2023-25662 Source advisory: OSV:PYSEC-2026-1958...

aggmap (>=1.1.1, <=1.2.1), animl (>=1.1.2, <=1.1.4) +55 more potentially affected by CVE-2023-25659 via tensorflow-gpu (>=2.0.0, <=2.10.1)

tensorflow-gpu PYPI version =2.0.0, =1.1.1, =1.1.2, =0.0.1, =0.0.9, =0.2.1, =0.1.0, =0.0.4, =1.1.1, =1.1.0, =1.4.0 and more Source cves: CVE-2023-25659 Source advisory: OSV:PYSEC-2026-1959...

aggmap (>=1.1.1, <=1.2.1), animl (>=1.1.2, <=1.1.4) +55 more potentially affected by CVE-2023-25665 via tensorflow-gpu (>=2.0.0, <=2.10.1)

tensorflow-gpu PYPI version =2.0.0, =1.1.1, =1.1.2, =0.0.1, =0.0.9, =0.2.1, =0.1.0, =0.0.4, =1.1.1, =1.1.0, =1.4.0 and more Source cves: CVE-2023-25665 Source advisory: OSV:PYSEC-2026-1956...

aggmap (>=1.1.1, <=1.2.1), animl (>=1.1.2, <=1.1.4) +55 more potentially affected by CVE-2023-25660 via tensorflow-gpu (>=2.0.0, <=2.10.1)

tensorflow-gpu PYPI version =2.0.0, =1.1.1, =1.1.2, =0.0.1, =0.0.9, =0.2.1, =0.1.0, =0.0.4, =1.1.1, =1.1.0, =1.4.0 and more Source cves: CVE-2023-25660 Source advisory: OSV:PYSEC-2026-1963...

gamornet-cpu (>=0.2.3, <=0.4.3), tchatbot (0.1.0) +1 more potentially affected by CVE-2023-25664 via tensorflow-cpu (1.15.0)

tensorflow-cpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - gamornet-cpu =0.2.3, =0.7.0, =0.7.5 Source cves: CVE-2023-25664 Source advisory: OSV:PYSEC-2026-1951...

gamornet-cpu (>=0.2.3, <=0.4.3), tchatbot (0.1.0) +1 more potentially affected by CVE-2023-25661 via tensorflow-cpu (1.15.0)

tensorflow-cpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - gamornet-cpu =0.2.3, =0.7.0, =0.7.5 Source cves: CVE-2023-25661 Source advisory: OSV:PYSEC-2026-1952...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), cifar-10-model (7.4.0) +17 more potentially affected by CVE-2023-25664 via tensorflow-cpu (>=2.1.0, <=2.11.0)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.0b1, =0.1.2, =1.0.0, =0.0.4, =1.5.0, =0.1.3, =0.5.1, =0.102.0.dev0, =0.208.0.post1 and more Source cves: CVE-2023-25664 Source advisory: OSV:PYSEC-2026-1951...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), cifar-10-model (7.4.0) +17 more potentially affected by CVE-2023-25661 via tensorflow-cpu (>=2.1.0, <=2.11.0)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.0b1, =0.1.2, =1.0.0, =0.0.4, =1.5.0, =0.1.3, =0.5.1, =0.102.0.dev0, =0.208.0.post1 and more Source cves: CVE-2023-25661 Source advisory: OSV:PYSEC-2026-1952...

PYSEC-2026-1957 TensorFlow has Null Pointer Error in TensorArrayConcatV2

Impact When ctx-stepcontainter is a null ptr, the Lookup function will be executed with a null pointer. python import tensorflow as tf tf.rawops.TensorArrayConcatV2handle='a', 'b', flowin = 0.1, dtype=tf.int32, elementshapeexcept0=1 Patches We have patched the issue in GitHub commit...

PYSEC-2026-1959 TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch

Impact If the parameter indices for DynamicStitch does not match the shape of the parameter data, it can trigger an stack OOB read. python import tensorflow as tf func = tf.rawops.DynamicStitch para='indices': 0xdeadbeef, 405, 519, 758, 1015, 'data': 110.27793884277344, 120.29475402832031,...

TensorFlow has Heap-buffer-overflow in AvgPoolGrad

Impactpythonimport osos.environ'TFENABLEONEDNNOPTS' = '0'import tensorflow as tfprinttf.versionwith tf.device"CPU": ksize = 1, 40, 128, 1 strides = 1, 128, 128, 30 padding = "SAME" dataformat = "NHWC" originputshape = 11, 9, 78, 9 grad = tf.saturatecasttf.random.uniform16, 16, 16, 16, minval=-128...