CVE-2021-29590

TensorFlow is an end-to-end open source platform for machine learning. The implementations of the Minimum and Maximum TFLite operators can be used to read data outside of bounds of heap allocated objects, if any of the two input tensor arguments are empty. This is because the broadcasting...

accuinsight (>=1.0.62, <=3.0.0), adapt-diagnostics (>=1.2.0, <=1.6.0) +95 more potentially affected by CVE-2021-29590 via tensorflow (>=2.3.0, <=2.3.2)

tensorflow PYPI version =2.3.0, =1.0.62, =1.2.0, =0.0.1a0, =0.0.1, =1.0.0rc1, =20210206.0.0, =0.1.0.dev1, =0.2.4, =1.0.1.0, =0.1.0, =2.0.0rc1, =2.0.3 and more Source cves: CVE-2021-29590 Source advisory: GHSA-24X6-8C7M-HV3F...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2021-29590 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2021-29590...

jlpyutils (>=0.0.7, <=0.1.1) potentially affected by CVE-2021-29590 via tensorflow-gpu (1.12.2)

tensorflow-gpu PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - jlpyutils =0.0.7, =0.1.1 Source cves: CVE-2021-29590 Source advisory: OSV:GHSA-24X6-8C7M-HV3F...

delft (>=0.2.3, <=0.2.4), keras-textclassification (0.1.6) +10 more potentially affected by CVE-2021-29590 via tensorflow-gpu (1.12.0)

tensorflow-gpu PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - delft =0.2.3, =0.0.1, =0.0.1, =0.0.2 - monk-keras-cuda92 0.0.1 - monk-keras-cuda92-test 0.0.1 Source cves: CVE-2021-29590 Source...

verse16 (>=0.1.1, <=0.1.2) potentially affected by CVE-2021-29590 via tensorflow-gpu (1.15.3)

tensorflow-gpu PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - verse16 =0.1.1, =0.1.2 Source cves: CVE-2021-29590 Source advisory: OSV:GHSA-24X6-8C7M-HV3F...

abmarl (>=0.1.1, <=0.1.3), agrothon (>=1.1.5, <=1.3.2) +79 more potentially affected by CVE-2021-29590 via tensorflow (>=2.4.0, <=2.4.1)

tensorflow PYPI version =2.4.0, =0.1.1, =1.1.5, =2.1.0, =0.0.1, =0.0.6, =0.1.0, =1.4.0, =1.2.2, =20210221.0.0, =0.7.2, =0.0.0, =0.0.0.post0 and more Source cves: CVE-2021-29590 Source advisory: GHSA-24X6-8C7M-HV3F...

aglvq (1.0.0), aipack (>=0.0.1, <=0.0.5) +142 more potentially affected by CVE-2021-29590 via tensorflow (>=2.0.0, <=2.1.2)

tensorflow PYPI version =2.0.0, =0.0.1, =2.0.0b0, =0.1.3.2, =3.0.0, =0.2.0, =0.0.2, =1.0.0.1, =0.0.1, =0.2.1 - colornet 0.2.0 and more Source cves: CVE-2021-29590 Source advisory: GHSA-24X6-8C7M-HV3F...

abmarl (>=0.1.1, <=0.1.3), agrothon (>=1.1.5, <=1.3.2) +79 more potentially affected by CVE-2021-29590 via tensorflow (>=2.4.0, <=2.4.1)

tensorflow PYPI version =2.4.0, =0.1.1, =1.1.5, =2.1.0, =0.0.1, =0.0.6, =0.1.0, =1.4.0, =1.2.2, =20210221.0.0, =0.7.2, =0.0.0, =0.0.0.post0 and more Source cves: CVE-2021-29590 Source advisory: OSV:GHSA-24X6-8C7M-HV3F...

adpred (>=1.1.2, <=1.2.7), aix360 (>=0.2.0, <=0.2.1) +73 more potentially affected by CVE-2021-29590 via tensorflow (1.14.0)

tensorflow PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - adpred =1.1.2, =0.2.0, =1.0.4, =0.1.1, =1.0.2, =0.0.4, =0.1.0, =0.92.0, =0.12.0, =0.22.0 and more Source cves: CVE-2021-29590 Source...

cellunet (>=0.1.0, <=0.2.2), color2vec (1.0.0) +12 more potentially affected by CVE-2021-29590 via tensorflow (1.8.0)

tensorflow PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cellunet =0.1.0, =0.0.5.1, =0.1.0, =0.1.1.1, =1.1.0, =0.9.0a7, =0.1.0, =0.11.0, =0.4.1, =0.5.2, =0.5.5 Source cves: CVE-2021-29590 Source...

nuclear-python (>=0.14.4.1, <=0.14.6.2) potentially affected by CVE-2021-29590 via tensorflow-gpu (1.13.2)

tensorflow-gpu PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - nuclear-python =0.14.4.1, =0.14.6.2 Source cves: CVE-2021-29590 Source advisory: OSV:GHSA-24X6-8C7M-HV3F...

strawberryfields-gpu (>=0.7.3, <=0.10.0) potentially affected by CVE-2021-29590 via tensorflow-gpu (1.6.0)

tensorflow-gpu PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - strawberryfields-gpu =0.7.3, =0.10.0 Source cves: CVE-2021-29590 Source advisory: OSV:GHSA-24X6-8C7M-HV3F...

bert-multitask-learning (>=0.1.0, <=0.2.9), miscnn (>=0.6.0, <=0.28.0) potentially affected by CVE-2021-29590 via tensorflow-gpu (1.13.1)

tensorflow-gpu PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - bert-multitask-learning =0.1.0, =0.6.0, =0.28.0 Source cves: CVE-2021-29590 Source advisory: OSV:GHSA-24X6-8C7M-HV3F...

audeep (>=0.9.2, <=0.9.6a1), cryocare (>=0.0.1, <=0.0.2) +17 more potentially affected by CVE-2021-29590 via tensorflow-gpu (1.15.5)

tensorflow-gpu PYPI version 1.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - audeep =0.9.2, =0.0.1, =0.6.7a1, =0.2.5, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =1.3.0, =0.0.4, =0.1.3, =0.4.0, =0.0.6, =0.0.8 and more...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), easyquake (>=1.1.0, <=1.2.2) +17 more potentially affected by CVE-2021-29590 via tensorflow-gpu (>=2.0.0, <=2.1.1)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.0, =0.2.0, =0.6.4, =0.6.5 - maupassant 0.1.1 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 - monk-keras-cuda100-test 0.0.1 - monk-keras-cuda101 0.0.1 -...

pycnet-audio (>=0.5.1, <=0.5.8) potentially affected by CVE-2021-29590 via tensorflow-cpu (2.2.0)

tensorflow-cpu PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - pycnet-audio =0.5.1, =0.5.8 Source cves: CVE-2021-29590 Source advisory: OSV:GHSA-24X6-8C7M-HV3F...

arekit (>=0.21.0, <=0.22.1), arenets (>=0.23.0, <=0.23.1) +19 more potentially affected by CVE-2021-29590 via tensorflow-gpu (1.14.0)

tensorflow-gpu PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - arekit =0.21.0, =0.23.0, =1.0.0, =0.0.1, =0.1.6, =0.1.0, =0.0.6, =1.0.1, =1.0.2 - ocrd-anybaseocr 0.0.1 and more Source cves:...

axelerate (>=0.5.8, <=0.5.9), bianbu-ai-toolkit-tf1 (1.0.6) +27 more potentially affected by CVE-2021-29590 via tensorflow (1.15.3)

tensorflow PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - axelerate =0.5.8, =0.0.1.2, =0.0.13, =1.1.0, =0.22.0, =1.6.0, =4.1.3, =0.10.0.dev1, =0.11.0 - muffnn 2.3.1 - neoepiscope 0.4.0 and more...

accuinsight (>=1.0.62, <=3.0.0), adapt-diagnostics (>=1.2.0, <=1.6.0) +95 more potentially affected by CVE-2021-29590 via tensorflow (>=2.3.0, <=2.3.2)

tensorflow PYPI version =2.3.0, =1.0.62, =1.2.0, =0.0.1a0, =0.0.1, =1.0.0rc1, =20210206.0.0, =0.1.0.dev1, =0.2.4, =1.0.1.0, =0.1.0, =2.0.0rc1, =2.0.3 and more Source cves: CVE-2021-29590 Source advisory: OSV:PYSEC-2021-227...