tensorflowjs (>=1.5.2, <=1.7.4) potentially affected by CVE-2020-15194 via tensorflow-cpu (2.1.0)

tensorflow-cpu PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - tensorflowjs =1.5.2, =1.7.4 Source cves: CVE-2020-15194 Source advisory: GHSA-9MQP-7V2H-2382...

tensorflowjs (>=1.5.2, <=1.7.4) potentially affected by CVE-2020-15190 via tensorflow-cpu (2.1.0)

tensorflow-cpu PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - tensorflowjs =1.5.2, =1.7.4 Source cves: CVE-2020-15190 Source advisory: OSV:GHSA-4G9F-63RX-5CW4...

tensorflowjs (>=1.5.2, <=1.7.4) potentially affected by CVE-2020-15190 via tensorflow-cpu (2.1.0)

tensorflow-cpu PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - tensorflowjs =1.5.2, =1.7.4 Source cves: CVE-2020-15190 Source advisory: GHSA-4G9F-63RX-5CW4...