HIGH 8.1 PyPI
GHSA-23hm-7w47-xw72 · BIT-tensorflow-2022-21726, CVE-2022-21726 Out of bounds read in Tensorflow
Modified: 11/13/2024
package
PyPI / tensorflow
pkg:pypi/tensorflow
MEDIUM 5.9 PyPI
GHSA-2475-53vw-vp25 · BIT-tensorflow-2022-35968, CVE-2022-35968 TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad`
Modified: 12/6/2023
HIGH 7.5 PyPI
GHSA-247x-2f9f-5wp7 · BIT-tensorflow-2022-23591, CVE-2022-23591 Stack overflow in TensorFlow
Modified: 11/13/2024
HIGH 7.6 PyPI
GHSA-24x4-6qmh-88qg · BIT-tensorflow-2022-23584, CVE-2022-23584 Use after free in `DecodePng` kernel
Modified: 11/7/2024
LOW 2.5 PyPI
GHSA-24x6-8c7m-hv3f · BIT-tensorflow-2021-29590, CVE-2021-29590 Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-26j7-6w8w-7922 · BIT-tensorflow-2021-29586, CVE-2021-29586 Division by zero in optimized pooling implementations in TFLite
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-278g-rq84-9hmg · BIT-tensorflow-2021-37673, CVE-2021-37673 `CHECK`-fail in `MapStage`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-27j5-4p9v-pp67 · BIT-tensorflow-2021-37644, CVE-2021-37644 `std::abort` raised from `TensorListReserve`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-27qf-jwm8-g7f3 · BIT-tensorflow-2021-37691, CVE-2021-37691 FPE in LSH in TFLite
Modified: 3/13/2026
MEDIUM 4.8 PyPI
GHSA-27rc-728f-x5w2 · BIT-tensorflow-2022-41899, CVE-2022-41899 `CHECK` fail via inputs in `SdcaOptimizer`
Modified: 2/16/2024
LOW 2.5 PyPI
GHSA-2cpx-427x-q2c6 · BIT-tensorflow-2021-29523, CVE-2021-29523 CHECK-fail in AddManySparseToTensorsMap
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-2gfx-95x2-5v3x · BIT-tensorflow-2021-29536, CVE-2021-29536 Heap buffer overflow in `QuantizedReshape`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-2p25-55c9-h58q · BIT-tensorflow-2021-41198, CVE-2021-41198 Overflow/crash in `tf.tile` when tiling tensor is large
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-2p9q-h29j-3f5v · BIT-tensorflow-2022-29193, CVE-2022-29193 Missing validation causes `TensorSummaryV2` to crash
Modified: 12/6/2023
HIGH 7.1 PyPI
GHSA-2r2f-g8mw-9gvr · BIT-tensorflow-2022-29208, CVE-2022-29208 Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Modified: 12/6/2023
HIGH 7.3 PyPI
GHSA-2r8p-fg3c-wcj4 · BIT-tensorflow-2021-37654, CVE-2021-37654 Heap OOB and CHECK fail in `ResourceGather`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-2vv3-56qg-g2cf · BIT-tensorflow-2022-29200, CVE-2022-29200 Missing validation causes denial of service via `LSTMBlockCell`
Modified: 2/16/2024
MEDIUM 5.5 PyPI
GHSA-2wmv-37vq-52g5 · BIT-tensorflow-2021-37668, CVE-2021-37668 FPE in `tf.raw_ops.UnravelIndex`
Modified: 3/13/2026
LOW 3.6 PyPI
GHSA-2xgj-xhgf-ggjv · BIT-tensorflow-2021-29612, CVE-2021-29612 Heap buffer overflow in `BandedTriangularSolve`
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-34f9-hjfq-rr8j · BIT-tensorflow-2022-21729, CVE-2022-21729 Overflow and uncaught divide by zero in Tensorflow
Modified: 11/13/2024
MEDIUM 4.8 PyPI
GHSA-368v-7v32-52fx · BIT-tensorflow-2022-41907, CVE-2022-41907 Overflow in `ResizeNearestNeighborGrad`
Modified: 12/6/2023
LOW 2.5 PyPI
GHSA-36vm-xw34-x4pj · BIT-tensorflow-2021-29562, CVE-2021-29562 CHECK-fail in `tf.raw_ops.IRFFT`
Modified: 3/13/2026
HIGH 7.1 PyPI
GHSA-374m-jm66-3vj8 · BIT-tensorflow-2021-41226, CVE-2021-41226 Heap OOB in `SparseBinCount`
Modified: 3/13/2026
MEDIUM 5.9 PyPI
GHSA-37jf-mjv6-xfqw · BIT-tensorflow-2022-35999, CVE-2022-35999 TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`
Modified: 12/6/2023
LOW 2.5 PyPI
GHSA-393f-2jr3-cp69 · BIT-tensorflow-2021-29533, CVE-2021-29533 CHECK-fail in DrawBoundingBoxes
Modified: 3/13/2026
MEDIUM 5.9 PyPI
GHSA-397c-5g2j-qxpv · BIT-tensorflow-2022-35982, CVE-2022-35982 TensorFlow vulnerable to segfault in `SparseBincount`
Modified: 12/6/2023
MEDIUM 5.5 PyPI
GHSA-3ff2-r28g-w7h9 · BIT-tensorflow-2021-41216, CVE-2021-41216 Heap buffer overflow in `Transpose`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-3h8m-483j-7xxm · BIT-tensorflow-2021-29569, CVE-2021-29569 Heap out of bounds read in `RequantizationRange`
Modified: 3/13/2026
MEDIUM 6.6 PyPI
GHSA-3hxh-8cp2-g4hg · BIT-tensorflow-2021-37690, CVE-2021-37690 Use after free and segfault in shape inference functions
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-3mw4-6rj6-74g5 · BIT-tensorflow-2022-21739, CVE-2022-21739 Null pointer dereference in TensorFlow
Modified: 11/13/2024
LOW 2.5 PyPI
GHSA-3qgw-p4fm-x7gf · BIT-tensorflow-2021-29594, CVE-2021-29594 Division by zero in TFLite's convolution code
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-3qxp-qjq7-w4hf · BIT-tensorflow-2021-29531, CVE-2021-29531 CHECK-fail in tf.raw_ops.EncodePng
Modified: 3/13/2026
HIGH 7.5 PyPI
GHSA-3rcw-9p9x-582v · BIT-tensorflow-2021-41228, CVE-2021-41228 Code injection in `saved_model_cli`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-3w67-q784-6w7c · BIT-tensorflow-2021-29589, CVE-2021-29589 Division by zero in TFLite's implementation of `GatherNd`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-4278-2v5v-65r4 · BIT-tensorflow-2021-29512, CVE-2021-29512 Heap buffer overflow in `RaggedBinCount`
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-428x-9xc2-m8mj · BIT-tensorflow-2022-21741, CVE-2022-21741 Division by zero in TFLite
Modified: 11/13/2024
MEDIUM 6.5 PyPI
GHSA-43jf-985q-588j · BIT-tensorflow-2022-23586, CVE-2022-23586 Multiple `CHECK`-fails in `function.cc` in TensowFlow
Modified: 11/7/2024
HIGH 7.0 PyPI
GHSA-43q8-3fv7-pr5x Improper Validation of Integrity Check Value in TensorFlow
Modified: 12/5/2024
HIGH 7.6 PyPI
GHSA-44qp-9wwf-734r · BIT-tensorflow-2022-21740, CVE-2022-21740 Heap overflow in Tensorflow
Modified: 11/13/2024
LOW 2.5 PyPI
GHSA-452g-f7fp-9jf7 · BIT-tensorflow-2021-29513, CVE-2021-29513 Type confusion during tensor casts lead to dereferencing null pointers
Modified: 3/13/2026
HIGH 7.5 PyPI
GHSA-49rq-hwc3-x77w · BIT-tensorflow-2023-25670, CVE-2023-25670 TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
Modified: 12/6/2023
HIGH 7.1 PyPI
GHSA-49rx-x2rw-pc6f · BIT-tensorflow-2021-41205, CVE-2021-41205 Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops
Modified: 3/13/2026
MEDIUM 4.4 PyPI
GHSA-4c4g-crqm-xrxw · BIT-tensorflow-2021-37682, CVE-2021-37682 Use of unitialized value in TFLite
Modified: 3/13/2026
HIGH 7.8 PyPI
GHSA-4f99-p9c2-3j8x · BIT-tensorflow-2021-41219, CVE-2021-41219 Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-4fg4-p75j-w5xj · BIT-tensorflow-2021-29547, CVE-2021-29547 Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization`
Modified: 3/13/2026
MEDIUM 5.3 PyPI
GHSA-4g9f-63rx-5cw4 · BIT-tensorflow-2020-15190, CVE-2020-15190 Segfault in Tensorflow
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-4hrh-9vmp-2jgg · BIT-tensorflow-2021-29542, CVE-2021-29542 Heap buffer overflow in `StringNGrams`
Modified: 3/13/2026
HIGH 8.8 PyPI
GHSA-4hvf-hxvg-f67v · BIT-tensorflow-2022-23560, CVE-2022-23560 Read and Write outside of bounds in TensorFlow
Modified: 11/13/2024
LOW 2.5 PyPI
GHSA-4hvv-7x94-7vq8 · BIT-tensorflow-2021-29616, CVE-2021-29616 Null dereference in Grappler's `TrySimplify`
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-4j82-5ccr-4r8v · BIT-tensorflow-2022-23582, CVE-2022-23582 `CHECK`-failures in `TensorByteSize` in Tensorflow
Modified: 11/7/2024
LOW 2.5 PyPI
GHSA-4p4p-www8-8fv9 · BIT-tensorflow-2021-29568, CVE-2021-29568 Reference binding to null in `ParameterizedTruncatedNormal`
Modified: 3/13/2026
MEDIUM 5.9 PyPI
GHSA-4pc4-m9mj-v2r9 · BIT-tensorflow-2022-35972, CVE-2022-35972 TensorFlow vulnerable to segfault in `QuantizedBiasAdd`
Modified: 12/6/2023
MEDIUM 6.5 PyPI
GHSA-4v5p-v5h9-6xjx · BIT-tensorflow-2022-23565, CVE-2022-23565 `CHECK`-failures in Tensorflow
Modified: 11/13/2024
LOW 2.5 PyPI
GHSA-4vf2-4xcg-65cx · BIT-tensorflow-2021-29526, CVE-2021-29526 Division by 0 in `Conv2D`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-4vrf-ff7v-hpgr · BIT-tensorflow-2021-29596, CVE-2021-29596 Division by zero in TFLite's implementation of `EmbeddingLookup`
Modified: 3/13/2026
MEDIUM 5.9 PyPI
GHSA-4w68-4x85-mjj9 · BIT-tensorflow-2022-35966, CVE-2022-35966 TensorFlow vulnerable to segfault in `QuantizedAvgPool`
Modified: 12/6/2023
HIGH 7.1 PyPI
GHSA-4xfp-4pfp-89wg · BIT-tensorflow-2021-37656, CVE-2021-37656 Reference binding to nullptr in `RaggedTensorToSparse`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-545v-42p7-98fq · BIT-tensorflow-2021-29570, CVE-2021-29570 Heap out of bounds read in `MaxPoolGradWithArgmax`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-54ch-gjq5-4976 · BIT-tensorflow-2022-29205, CVE-2022-29205 Segfault due to missing support for quantized types
Modified: 12/6/2023
MEDIUM 4.8 PyPI
GHSA-54pp-c6pp-7fpx · BIT-tensorflow-2022-41886, CVE-2022-41886 Overflow in `ImageProjectiveTransformV2`
Modified: 12/6/2023
HIGH 7.5 PyPI
GHSA-558h-mq8x-7q9g · BIT-tensorflow-2023-25665, CVE-2023-25665 TensorFlow has Null Pointer Error in SparseSparseMaximum
Modified: 12/6/2023
CRITICAL 9.3 PyPI
GHSA-57wx-m983-2f88 · BIT-tensorflow-2021-41208, CVE-2021-41208 Incomplete validation in boosted trees code
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-5889-7v45-q28m · BIT-tensorflow-2022-29213, CVE-2022-29213 Incomplete validation in signal ops leads to crashes in TensorFlow
Modified: 2/16/2024
LOW 2.5 PyPI
GHSA-59q2-x2qc-4c97 · BIT-tensorflow-2021-29559, CVE-2021-29559 Heap OOB access in unicode ops
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-5crj-c72x-m7gq · BIT-tensorflow-2021-41217, CVE-2021-41217 Null pointer exception when `Exit` node is not preceded by `Enter` op
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-5f2r-qp73-37mr · BIT-tensorflow-2022-23579, CVE-2022-23579 `CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
Modified: 11/7/2024
LOW 2.5 PyPI
GHSA-5gqf-456p-4836 · BIT-tensorflow-2021-29572, CVE-2021-29572 Reference binding to nullptr in `SdcaOptimizer`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-5hj3-vjjf-f5m7 · BIT-tensorflow-2021-37672, CVE-2021-37672 Heap OOB in `SdcaOptimizerV2`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-5hx2-qx8j-qjqm · BIT-tensorflow-2021-41199, CVE-2021-41199 Overflow/crash in `tf.image.resize` when size is large
Modified: 3/13/2026
HIGH 8.8 PyPI
GHSA-5qw5-89mw-wcg2 · BIT-tensorflow-2022-23566, CVE-2022-23566 Out of bounds write in Tensorflow
Modified: 11/13/2024
MEDIUM 5.5 PyPI
GHSA-5v77-j66x-4c4g · BIT-tensorflow-2022-29196, CVE-2022-29196 Missing validation causes denial of service via `Conv3DBackpropFilterV2`
Modified: 2/16/2024
HIGH 7.5 PyPI
GHSA-5w96-866f-6rm8 · BIT-tensorflow-2023-27579, CVE-2023-27579 TensorFlow has Floating Point Exception in TFLite in conv kernel
Modified: 12/6/2023
MEDIUM 5.5 PyPI
GHSA-5wpj-c6f7-24x8 · BIT-tensorflow-2022-29207, CVE-2022-29207 Undefined behavior when users supply invalid resource handles
Modified: 12/6/2023
HIGH 7.1 PyPI
GHSA-5xwc-mrhx-5g3m · BIT-tensorflow-2021-37657, CVE-2021-37657 Reference binding to nullptr in `MatrixDiagV*` ops
Modified: 3/14/2026
MEDIUM 6.5 PyPI
GHSA-627q-g293-49q7 · BIT-tensorflow-2022-23580, CVE-2022-23580 Abort caused by allocating a vector that is too large in Tensorflow
Modified: 11/7/2024
LOW 2.5 PyPI
GHSA-62gx-355r-9fhg · BIT-tensorflow-2021-29518, CVE-2021-29518 Session operations in eager mode lead to null pointer dereferences
Modified: 3/13/2026
HIGH 8.5 PyPI
GHSA-63xm-rx5p-xvqr · BIT-tensorflow-2020-15195, CVE-2020-15195 Heap buffer overflow in Tensorflow
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-6445-fm66-fvq2 · BIT-tensorflow-2022-23568, CVE-2022-23568 Integer overflows in Tensorflow
Modified: 11/13/2024
HIGH 7.5 PyPI
GHSA-647v-r7qq-24fh · BIT-tensorflow-2023-25673, CVE-2023-25673 TensorFlow has Floating Point Exception in TensorListSplit with XLA
Modified: 12/6/2023
HIGH 7.5 PyPI
GHSA-64jg-wjww-7c5w · BIT-tensorflow-2023-25663, CVE-2023-25663 TensorFlow has Null Pointer Error in TensorArrayConcatV2
Modified: 12/6/2023
MEDIUM 4.8 PyPI
GHSA-66vq-54fq-6jvv · BIT-tensorflow-2022-41891, CVE-2022-41891 Segfault in `tf.raw_ops.TensorListConcat`
Modified: 12/6/2023
MEDIUM 4.8 PyPI
GHSA-67pf-62xr-q35m · BIT-tensorflow-2022-41893, CVE-2022-41893 `CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
Modified: 12/6/2023
MEDIUM 5.9 PyPI
GHSA-689c-r7h2-fv9v · BIT-tensorflow-2022-35973, CVE-2022-35973 TensorFlow vulnerable to segfault in `QuantizedMatMul`
Modified: 12/6/2023
HIGH 7.5 PyPI
GHSA-68v3-g9cm-rmm6 · BIT-tensorflow-2023-25658, CVE-2023-25658 TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
Modified: 12/6/2023
LOW 2.5 PyPI
GHSA-6f84-42vf-ppwp · BIT-tensorflow-2021-29528, CVE-2021-29528 Division by 0 in `QuantizedMul`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-6f89-8j54-29xf · BIT-tensorflow-2021-29578, CVE-2021-29578 Heap buffer overflow in `FractionalAvgPoolGrad`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-6g85-3hm8-83f9 · BIT-tensorflow-2021-29544, CVE-2021-29544 CHECK-fail in `QuantizeAndDequantizeV4Grad`
Modified: 3/13/2026
HIGH 8.1 PyPI
GHSA-6gmv-pjp9-p8w8 · BIT-tensorflow-2022-21728, CVE-2022-21728 Out of bounds read in Tensorflow
Modified: 11/13/2024
HIGH 7.7 PyPI
GHSA-6gv8-p3vj-pxvr · BIT-tensorflow-2021-37649, CVE-2021-37649 Null pointer dereference in `UncompressElement`
Modified: 3/13/2026
HIGH 7.5 PyPI
GHSA-6hg6-5c2q-7rcr · BIT-tensorflow-2023-25664, CVE-2023-25664 TensorFlow has Heap-buffer-overflow in AvgPoolGrad
Modified: 12/6/2023
MEDIUM 5.5 PyPI
GHSA-6hpv-v2rx-c5g6 · BIT-tensorflow-2021-41209, CVE-2021-41209 FPE in convolutions with zero size filters
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-6j9c-grc6-5m6g · BIT-tensorflow-2021-29534, CVE-2021-29534 CHECK-fail in SparseConcat
Modified: 3/13/2026
HIGH 7.1 PyPI
GHSA-6p5r-g9mq-ggh2 · BIT-tensorflow-2021-37658, CVE-2021-37658 Reference binding to nullptr in `MatrixSetDiagV*` ops
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-6qgm-fv6v-rfpv · BIT-tensorflow-2021-29575, CVE-2021-29575 Overflow/denial of service in `tf.raw_ops.ReverseSequence`
Modified: 3/13/2026
HIGH 7.5 PyPI
GHSA-6wfh-89q8-44jq · BIT-tensorflow-2023-25676, CVE-2023-25676 TensorFlow has null dereference on ParallelConcat with XLA
Modified: 12/6/2023
MEDIUM 4.8 PyPI
GHSA-6x99-gv2v-q76v · BIT-tensorflow-2022-41888, CVE-2022-41888 FPE in `tf.image.generate_bounding_box_proposals`
Modified: 12/6/2023
HIGH 7.8 PyPI
GHSA-75c9-jrh4-79mc · BIT-tensorflow-2022-29216, CVE-2022-29216 Code injection in `saved_model_cli` in TensorFlow
Modified: 12/6/2023
LOW 2.5 PyPI
GHSA-75f6-78jr-4656 · BIT-tensorflow-2021-29564, CVE-2021-29564 Null pointer dereference in `EditDistance`
Modified: 3/13/2026
MEDIUM 4.8 PyPI
GHSA-762h-vpvw-3rcx · BIT-tensorflow-2022-41885, CVE-2022-41885 Overflow in `FusedResizeAndPadConv2D`
Modified: 12/6/2023
LOW 2.5 PyPI
GHSA-772j-h9xw-ffp5 · BIT-tensorflow-2021-29519, CVE-2021-29519 CHECK-fail in SparseCross due to type confusion
Modified: 3/13/2026