aggmap (>=1.1.1 <=1.2.1), molmap (>=1.3.1 <=1.4.0) potentially affected by CVE-2022-41893 via tensorflow-gpu (=2.9.1)

tensorflow-gpu PYPI version =2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - aggmap =1.1.1, =1.3.1, =1.4.0 Source cves: CVE-2022-41893 Source advisory: OSV:GHSA-67PF-62XR-Q35M...

CVE-2022-41893

creationtimestamp| type| source ---|---|--- 2022-11-19 00:29:37+00:00| published-proof-of-concept| https://t.me/cibsecurity/53179...