GHSA-5X94-69RX-G8H2 vulnerabilities

Vulnerabilities for packages: label-studio, tritonserver-backend-vllm-cuda-13.0, open-webui, mlflow, superset-fips, openstack-horizon-2026.1-fips, superset, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, tensorflow-gpu-jupyter,...

GHSA-6R8X-57C9-28J4 vulnerabilities

Vulnerabilities for packages: label-studio, tritonserver-backend-vllm-cuda-13.0, open-webui, mlflow, superset-fips, openstack-horizon-2026.1-fips, superset, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, tensorflow-gpu-jupyter,...

GHSA-FJ7V-R99M-22GQ vulnerabilities

Vulnerabilities for packages: label-studio, tritonserver-backend-vllm-cuda-13.0, open-webui, mlflow, superset-fips, openstack-horizon-2026.1-fips, superset, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, tensorflow-gpu-jupyter,...

GHSA-PHJ9-MV4W-65PM vulnerabilities

Vulnerabilities for packages: label-studio, tritonserver-backend-vllm-cuda-13.0, open-webui, mlflow, superset-fips, openstack-horizon-2026.1-fips, superset, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, tensorflow-gpu-jupyter,...

GHSA-VJC4-5QP5-M44J vulnerabilities

Vulnerabilities for packages: label-studio, tritonserver-backend-vllm-cuda-13.0, open-webui, mlflow, superset-fips, openstack-horizon-2026.1-fips, superset, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, tensorflow-gpu-jupyter,...

CVE-2026-59198 vulnerabilities

Vulnerabilities for packages: label-studio, tritonserver-backend-vllm-cuda-13.0, open-webui, mlflow, superset-fips, openstack-horizon-2026.1-fips, superset, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, tensorflow-gpu-jupyter,...

CVE-2026-54058 vulnerabilities

Vulnerabilities for packages: label-studio, tritonserver-backend-vllm-cuda-13.0, open-webui, mlflow, superset-fips, openstack-horizon-2026.1-fips, superset, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, tensorflow-gpu-jupyter,...

CVE-2026-55380 vulnerabilities

Vulnerabilities for packages: label-studio, tritonserver-backend-vllm-cuda-13.0, open-webui, mlflow, superset-fips, openstack-horizon-2026.1-fips, superset, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, tensorflow-gpu-jupyter,...

CVE-2026-59204 vulnerabilities

Vulnerabilities for packages: label-studio, tritonserver-backend-vllm-cuda-13.0, open-webui, mlflow, superset-fips, openstack-horizon-2026.1-fips, superset, text-generation-inference, openstack-horizon-2026.1, openstack-horizon-2025.2-fips, lmcache-cuda-12.8, tensorflow-gpu-jupyter,...

CLEANSTART-2026-CR75797 Security fixes for CVE-2026-25645, CVE-2026-39822, CVE-2026-42505, CVE-2026-59884, CVE-2026-59885, CVE-2026-59886 applied in versions: 2.20.0-r0, 2.20.0-r1

Multiple security vulnerabilities affect the tensorflow-gpu-jupyter package. These issues are resolved in later releases. See references for individual vulnerability details...

axcorsrmri (0.0.1), behavython (>=0.7.0, <=0.9.8) +8 more potentially affected by CVE-2026-12484 via keras (2.12.0rc1)

keras PYPI version 2.12.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - axcorsrmri 0.0.1 - behavython =0.7.0, =0.3.21, =0.1.5, =0.29.0, =2.11.0rc1, =2.11.0rc1, =2.11.0rc1, =2.11.0rc2 - tensorflow-text 2.10.0rc0 Source...

FPE in `tf.image.generate_bounding_box_proposals`

ImpactWhen running on GPU, tf.image.generateboundingboxproposals receives a scores input that must be of rank 4 but is not checked.pythonimport tensorflow as tfa = tf.constantvalue=1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0b =...

dragonn (0.4.2), dream-on-gym (0.0.1) +5 more potentially affected by CVE-2023-25662 via tensorflow-gpu (1.15.0)

tensorflow-gpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - dragonn 0.4.2 - dream-on-gym 0.0.1 - ml4a =0.1.0, =0.0.3, =0.3.0, =0.9.0, =0.0.5, =0.0.88 Source cves: CVE-2023-25662 Source...

jlpyutils (>=0.0.7, <=0.1.1) potentially affected by CVE-2023-25660 via tensorflow-gpu (1.12.2)

tensorflow-gpu PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - jlpyutils =0.0.7, =0.1.1 Source cves: CVE-2023-25660 Source advisory: OSV:PYSEC-2026-1963...

nuclear-python (>=0.14.4.1, <=0.14.6.2) potentially affected by CVE-2023-25662 via tensorflow-gpu (1.13.2)

tensorflow-gpu PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - nuclear-python =0.14.4.1, =0.14.6.2 Source cves: CVE-2023-25662 Source advisory: OSV:PYSEC-2026-1958...

vcap (>=0.2.4.dev13, <=0.3.1) potentially affected by CVE-2023-25660 via tensorflow-gpu (1.15.4)

tensorflow-gpu PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - vcap =0.2.4.dev13, =0.3.1 Source cves: CVE-2023-25660 Source advisory: OSV:PYSEC-2026-1963...

verse16 (>=0.1.1, <=0.1.2) potentially affected by CVE-2023-25660 via tensorflow-gpu (1.15.3)

tensorflow-gpu PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - verse16 =0.1.1, =0.1.2 Source cves: CVE-2023-25660 Source advisory: OSV:PYSEC-2026-1963...

arekit (>=0.21.0, <=0.22.1), arenets (>=0.23.0, <=0.23.1) +19 more potentially affected by CVE-2023-25660 via tensorflow-gpu (1.14.0)

tensorflow-gpu PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - arekit =0.21.0, =0.23.0, =1.0.0, =0.0.1, =0.1.6, =0.1.0, =0.0.6, =1.0.1, =1.0.2 - ocrd-anybaseocr 0.0.1 and more Source cves:...

audeep (>=0.9.2, <=0.9.6a1), cryocare (>=0.0.1, <=0.0.2) +17 more potentially affected by CVE-2023-25662 via tensorflow-gpu (1.15.5)

tensorflow-gpu PYPI version 1.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - audeep =0.9.2, =0.0.1, =0.6.7a1, =0.2.5, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =1.3.0, =0.0.4, =0.1.3, =0.4.0, =0.0.6, =0.0.8 and more...

delft (0.2.2) potentially affected by CVE-2023-25662 via tensorflow-gpu (1.9.0)

tensorflow-gpu PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - delft 0.2.2 Source cves: CVE-2023-25662 Source advisory: OSV:PYSEC-2026-1958...