MEDIUM 5.5 PyPI
GHSA-x3v8-c8qx-3j3r · BIT-tensorflow-2021-41215, CVE-2021-41215 Null pointer exception in `DeserializeSparse`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-x4g7-fvjj-prg8 · BIT-tensorflow-2021-29527, CVE-2021-29527 Division by 0 in `QuantizedConv2D`
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-x4qx-4fjv-hmw6 · BIT-tensorflow-2022-21738, CVE-2022-21738 Integer overflow leading to crash in Tensorflow
Modified: 11/13/2024
MEDIUM 5.9 PyPI
GHSA-x5cp-9pcf-pp3h · BIT-tensorflow-2020-15199, CVE-2020-15199 Denial of Service in Tensorflow
Modified: 3/13/2026
MEDIUM 5.9 PyPI
GHSA-x7rp-74x2-mjf3 · BIT-tensorflow-2020-15200, CVE-2020-15200 Segfault in Tensorflow
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-x83m-p7pv-ch8v · BIT-tensorflow-2021-29549, CVE-2021-29549 Division by 0 in `QuantizedAdd`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-x8h6-xgqx-jqgp · BIT-tensorflow-2021-29580, CVE-2021-29580 Undefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad`
Modified: 3/13/2026
MEDIUM 5.9 PyPI
GHSA-x989-q2pq-4q5x · BIT-tensorflow-2022-35940, CVE-2022-35940 TensorFlow vulnerable to Int overflow in `RaggedRangeOp`
Modified: 12/6/2023
MEDIUM 6.5 PyPI
GHSA-x9j7-x98r-r4w2 · BIT-tensorflow-2020-15210, CVE-2020-15210 Segmentation fault in tensorflow-lite
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-xcwj-wfcm-m23c · BIT-tensorflow-2021-29530, CVE-2021-29530 Invalid validation in `SparseMatrixSparseCholesky`
Modified: 3/13/2026
LOW PyPI
GHSA-xf83-q765-xm6m `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode
Modified: 12/4/2024
LOW 2.5 PyPI
GHSA-xgc3-m89p-vr3x · BIT-tensorflow-2021-29540, CVE-2021-29540 Heap buffer overflow in `Conv2DBackpropFilter`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-xm2v-8rrw-w9pm · BIT-tensorflow-2021-29525, CVE-2021-29525 Division by 0 in `Conv2DBackpropInput`
Modified: 3/13/2026
HIGH 7.5 PyPI
GHSA-xmq7-7fxm-rr79 · BIT-tensorflow-2020-15203, CVE-2020-15203 Denial of Service in Tensorflow
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-xqfj-35wv-m3cr · BIT-tensorflow-2021-29541, CVE-2021-29541 Null pointer dereference in `StringNGrams`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-xqfj-cr6q-pc8w · BIT-tensorflow-2021-29618, CVE-2021-29618 Crash in `tf.transpose` with complex inputs
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-xrp2-fhq4-4q3w · BIT-tensorflow-2022-29211, CVE-2022-29211 Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
Modified: 12/6/2023
MEDIUM 5.5 PyPI
GHSA-xrqm-fpgr-6hhx · BIT-tensorflow-2021-41202, CVE-2021-41202 Overflow/crash in `tf.range`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-xvjm-fvxx-q3hv · BIT-tensorflow-2021-29584, CVE-2021-29584 CHECK-fail due to integer overflow
Modified: 3/13/2026
HIGH 7.1 PyPI
GHSA-xvwp-h6jv-7472 · BIT-tensorflow-2022-41900, CVE-2022-41900 FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess
Modified: 12/6/2023
LOW 2.5 PyPI
GHSA-xw93-v57j-fcgh · BIT-tensorflow-2021-29557, CVE-2021-29557 Division by 0 in `SparseMatMul`
Modified: 3/13/2026
LOW 3.7 PyPI
GHSA-xwhf-g6j5-j5gc · BIT-tensorflow-2020-15266, CVE-2020-15266 Float cast overflow undefined behavior
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-xxcj-rhqg-m46g · BIT-tensorflow-2022-41889, CVE-2022-41889 Segfault via invalid attributes in `pywrap_tfe_src.cc`
Modified: 1/15/2025
HIGH 8.1 PyPI
GHSA-23hm-7w47-xw72 · BIT-tensorflow-2022-21726, CVE-2022-21726 Out of bounds read in Tensorflow
Modified: 11/13/2024
MEDIUM 5.9 PyPI
GHSA-2475-53vw-vp25 · BIT-tensorflow-2022-35968, CVE-2022-35968 TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad`
Modified: 12/6/2023
HIGH 7.5 PyPI
GHSA-247x-2f9f-5wp7 · BIT-tensorflow-2022-23591, CVE-2022-23591 Stack overflow in TensorFlow
Modified: 11/13/2024
HIGH 7.6 PyPI
GHSA-24x4-6qmh-88qg · BIT-tensorflow-2022-23584, CVE-2022-23584 Use after free in `DecodePng` kernel
Modified: 11/7/2024
LOW 2.5 PyPI
GHSA-24x6-8c7m-hv3f · BIT-tensorflow-2021-29590, CVE-2021-29590 Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-26j7-6w8w-7922 · BIT-tensorflow-2021-29586, CVE-2021-29586 Division by zero in optimized pooling implementations in TFLite
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-278g-rq84-9hmg · BIT-tensorflow-2021-37673, CVE-2021-37673 `CHECK`-fail in `MapStage`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-27j5-4p9v-pp67 · BIT-tensorflow-2021-37644, CVE-2021-37644 `std::abort` raised from `TensorListReserve`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-27qf-jwm8-g7f3 · BIT-tensorflow-2021-37691, CVE-2021-37691 FPE in LSH in TFLite
Modified: 3/13/2026
MEDIUM 4.8 PyPI
GHSA-27rc-728f-x5w2 · BIT-tensorflow-2022-41899, CVE-2022-41899 `CHECK` fail via inputs in `SdcaOptimizer`
Modified: 2/16/2024
LOW 2.5 PyPI
GHSA-2cpx-427x-q2c6 · BIT-tensorflow-2021-29523, CVE-2021-29523 CHECK-fail in AddManySparseToTensorsMap
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-2gfx-95x2-5v3x · BIT-tensorflow-2021-29536, CVE-2021-29536 Heap buffer overflow in `QuantizedReshape`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-2p25-55c9-h58q · BIT-tensorflow-2021-41198, CVE-2021-41198 Overflow/crash in `tf.tile` when tiling tensor is large
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-2p9q-h29j-3f5v · BIT-tensorflow-2022-29193, CVE-2022-29193 Missing validation causes `TensorSummaryV2` to crash
Modified: 12/6/2023
HIGH 7.1 PyPI
GHSA-2r2f-g8mw-9gvr · BIT-tensorflow-2022-29208, CVE-2022-29208 Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Modified: 12/6/2023
HIGH 7.3 PyPI
GHSA-2r8p-fg3c-wcj4 · BIT-tensorflow-2021-37654, CVE-2021-37654 Heap OOB and CHECK fail in `ResourceGather`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-2vv3-56qg-g2cf · BIT-tensorflow-2022-29200, CVE-2022-29200 Missing validation causes denial of service via `LSTMBlockCell`
Modified: 2/16/2024
MEDIUM 5.5 PyPI
GHSA-2wmv-37vq-52g5 · BIT-tensorflow-2021-37668, CVE-2021-37668 FPE in `tf.raw_ops.UnravelIndex`
Modified: 3/13/2026
LOW 3.6 PyPI
GHSA-2xgj-xhgf-ggjv · BIT-tensorflow-2021-29612, CVE-2021-29612 Heap buffer overflow in `BandedTriangularSolve`
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-34f9-hjfq-rr8j · BIT-tensorflow-2022-21729, CVE-2022-21729 Overflow and uncaught divide by zero in Tensorflow
Modified: 11/13/2024
MEDIUM 4.8 PyPI
GHSA-368v-7v32-52fx · BIT-tensorflow-2022-41907, CVE-2022-41907 Overflow in `ResizeNearestNeighborGrad`
Modified: 12/6/2023
LOW 2.5 PyPI
GHSA-36vm-xw34-x4pj · BIT-tensorflow-2021-29562, CVE-2021-29562 CHECK-fail in `tf.raw_ops.IRFFT`
Modified: 3/13/2026
HIGH 7.1 PyPI
GHSA-374m-jm66-3vj8 · BIT-tensorflow-2021-41226, CVE-2021-41226 Heap OOB in `SparseBinCount`
Modified: 3/13/2026
MEDIUM 5.9 PyPI
GHSA-37jf-mjv6-xfqw · BIT-tensorflow-2022-35999, CVE-2022-35999 TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`
Modified: 12/6/2023
LOW 2.5 PyPI
GHSA-393f-2jr3-cp69 · BIT-tensorflow-2021-29533, CVE-2021-29533 CHECK-fail in DrawBoundingBoxes
Modified: 3/13/2026
MEDIUM 5.9 PyPI
GHSA-397c-5g2j-qxpv · BIT-tensorflow-2022-35982, CVE-2022-35982 TensorFlow vulnerable to segfault in `SparseBincount`
Modified: 12/6/2023
MEDIUM 5.5 PyPI
GHSA-3ff2-r28g-w7h9 · BIT-tensorflow-2021-41216, CVE-2021-41216 Heap buffer overflow in `Transpose`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-3h8m-483j-7xxm · BIT-tensorflow-2021-29569, CVE-2021-29569 Heap out of bounds read in `RequantizationRange`
Modified: 3/13/2026
MEDIUM 6.6 PyPI
GHSA-3hxh-8cp2-g4hg · BIT-tensorflow-2021-37690, CVE-2021-37690 Use after free and segfault in shape inference functions
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-3mw4-6rj6-74g5 · BIT-tensorflow-2022-21739, CVE-2022-21739 Null pointer dereference in TensorFlow
Modified: 11/13/2024
LOW 2.5 PyPI
GHSA-3qgw-p4fm-x7gf · BIT-tensorflow-2021-29594, CVE-2021-29594 Division by zero in TFLite's convolution code
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-3qxp-qjq7-w4hf · BIT-tensorflow-2021-29531, CVE-2021-29531 CHECK-fail in tf.raw_ops.EncodePng
Modified: 3/13/2026
HIGH 7.5 PyPI
GHSA-3rcw-9p9x-582v · BIT-tensorflow-2021-41228, CVE-2021-41228 Code injection in `saved_model_cli`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-3w67-q784-6w7c · BIT-tensorflow-2021-29589, CVE-2021-29589 Division by zero in TFLite's implementation of `GatherNd`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-4278-2v5v-65r4 · BIT-tensorflow-2021-29512, CVE-2021-29512 Heap buffer overflow in `RaggedBinCount`
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-428x-9xc2-m8mj · BIT-tensorflow-2022-21741, CVE-2022-21741 Division by zero in TFLite
Modified: 11/13/2024
MEDIUM 6.5 PyPI
GHSA-43jf-985q-588j · BIT-tensorflow-2022-23586, CVE-2022-23586 Multiple `CHECK`-fails in `function.cc` in TensowFlow
Modified: 11/7/2024
HIGH 7.0 PyPI
GHSA-43q8-3fv7-pr5x Improper Validation of Integrity Check Value in TensorFlow
Modified: 12/5/2024
HIGH 7.6 PyPI
GHSA-44qp-9wwf-734r · BIT-tensorflow-2022-21740, CVE-2022-21740 Heap overflow in Tensorflow
Modified: 11/13/2024
LOW 2.5 PyPI
GHSA-452g-f7fp-9jf7 · BIT-tensorflow-2021-29513, CVE-2021-29513 Type confusion during tensor casts lead to dereferencing null pointers
Modified: 3/13/2026
HIGH 7.5 PyPI
GHSA-49rq-hwc3-x77w · BIT-tensorflow-2023-25670, CVE-2023-25670 TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
Modified: 12/6/2023
HIGH 7.1 PyPI
GHSA-49rx-x2rw-pc6f · BIT-tensorflow-2021-41205, CVE-2021-41205 Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-4fg4-p75j-w5xj · BIT-tensorflow-2021-29547, CVE-2021-29547 Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization`
Modified: 3/13/2026
MEDIUM 4.4 PyPI
GHSA-4c4g-crqm-xrxw · BIT-tensorflow-2021-37682, CVE-2021-37682 Use of unitialized value in TFLite
Modified: 3/13/2026
HIGH 7.8 PyPI
GHSA-4f99-p9c2-3j8x · BIT-tensorflow-2021-41219, CVE-2021-41219 Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
Modified: 3/13/2026
MEDIUM 5.3 PyPI
GHSA-4g9f-63rx-5cw4 · BIT-tensorflow-2020-15190, CVE-2020-15190 Segfault in Tensorflow
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-4hrh-9vmp-2jgg · BIT-tensorflow-2021-29542, CVE-2021-29542 Heap buffer overflow in `StringNGrams`
Modified: 3/13/2026
HIGH 8.8 PyPI
GHSA-4hvf-hxvg-f67v · BIT-tensorflow-2022-23560, CVE-2022-23560 Read and Write outside of bounds in TensorFlow
Modified: 11/13/2024
LOW 2.5 PyPI
GHSA-4hvv-7x94-7vq8 · BIT-tensorflow-2021-29616, CVE-2021-29616 Null dereference in Grappler's `TrySimplify`
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-4j82-5ccr-4r8v · BIT-tensorflow-2022-23582, CVE-2022-23582 `CHECK`-failures in `TensorByteSize` in Tensorflow
Modified: 11/7/2024
LOW 2.5 PyPI
GHSA-4p4p-www8-8fv9 · BIT-tensorflow-2021-29568, CVE-2021-29568 Reference binding to null in `ParameterizedTruncatedNormal`
Modified: 3/13/2026
MEDIUM 5.9 PyPI
GHSA-4pc4-m9mj-v2r9 · BIT-tensorflow-2022-35972, CVE-2022-35972 TensorFlow vulnerable to segfault in `QuantizedBiasAdd`
Modified: 12/6/2023
MEDIUM 6.5 PyPI
GHSA-4v5p-v5h9-6xjx · BIT-tensorflow-2022-23565, CVE-2022-23565 `CHECK`-failures in Tensorflow
Modified: 11/13/2024
LOW 2.5 PyPI
GHSA-4vf2-4xcg-65cx · BIT-tensorflow-2021-29526, CVE-2021-29526 Division by 0 in `Conv2D`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-4vrf-ff7v-hpgr · BIT-tensorflow-2021-29596, CVE-2021-29596 Division by zero in TFLite's implementation of `EmbeddingLookup`
Modified: 3/13/2026
MEDIUM 5.9 PyPI
GHSA-4w68-4x85-mjj9 · BIT-tensorflow-2022-35966, CVE-2022-35966 TensorFlow vulnerable to segfault in `QuantizedAvgPool`
Modified: 12/6/2023
HIGH 7.1 PyPI
GHSA-4xfp-4pfp-89wg · BIT-tensorflow-2021-37656, CVE-2021-37656 Reference binding to nullptr in `RaggedTensorToSparse`
Modified: 3/13/2026
LOW 2.5 PyPI
GHSA-545v-42p7-98fq · BIT-tensorflow-2021-29570, CVE-2021-29570 Heap out of bounds read in `MaxPoolGradWithArgmax`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-54ch-gjq5-4976 · BIT-tensorflow-2022-29205, CVE-2022-29205 Segfault due to missing support for quantized types
Modified: 12/6/2023
MEDIUM 4.8 PyPI
GHSA-54pp-c6pp-7fpx · BIT-tensorflow-2022-41886, CVE-2022-41886 Overflow in `ImageProjectiveTransformV2`
Modified: 12/6/2023
HIGH 7.5 PyPI
GHSA-558h-mq8x-7q9g · BIT-tensorflow-2023-25665, CVE-2023-25665 TensorFlow has Null Pointer Error in SparseSparseMaximum
Modified: 12/6/2023
CRITICAL 9.3 PyPI
GHSA-57wx-m983-2f88 · BIT-tensorflow-2021-41208, CVE-2021-41208 Incomplete validation in boosted trees code
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-5889-7v45-q28m · BIT-tensorflow-2022-29213, CVE-2022-29213 Incomplete validation in signal ops leads to crashes in TensorFlow
Modified: 2/16/2024
LOW 2.5 PyPI
GHSA-59q2-x2qc-4c97 · BIT-tensorflow-2021-29559, CVE-2021-29559 Heap OOB access in unicode ops
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-5crj-c72x-m7gq · BIT-tensorflow-2021-41217, CVE-2021-41217 Null pointer exception when `Exit` node is not preceded by `Enter` op
Modified: 3/13/2026
MEDIUM 6.5 PyPI
GHSA-5f2r-qp73-37mr · BIT-tensorflow-2022-23579, CVE-2022-23579 `CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
Modified: 11/7/2024
LOW 2.5 PyPI
GHSA-5gqf-456p-4836 · BIT-tensorflow-2021-29572, CVE-2021-29572 Reference binding to nullptr in `SdcaOptimizer`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-5hj3-vjjf-f5m7 · BIT-tensorflow-2021-37672, CVE-2021-37672 Heap OOB in `SdcaOptimizerV2`
Modified: 3/13/2026
MEDIUM 5.5 PyPI
GHSA-5hx2-qx8j-qjqm · BIT-tensorflow-2021-41199, CVE-2021-41199 Overflow/crash in `tf.image.resize` when size is large
Modified: 3/13/2026
HIGH 8.8 PyPI
GHSA-5qw5-89mw-wcg2 · BIT-tensorflow-2022-23566, CVE-2022-23566 Out of bounds write in Tensorflow
Modified: 11/13/2024
MEDIUM 5.5 PyPI
GHSA-5v77-j66x-4c4g · BIT-tensorflow-2022-29196, CVE-2022-29196 Missing validation causes denial of service via `Conv3DBackpropFilterV2`
Modified: 2/16/2024
HIGH 7.5 PyPI
GHSA-5w96-866f-6rm8 · BIT-tensorflow-2023-27579, CVE-2023-27579 TensorFlow has Floating Point Exception in TFLite in conv kernel
Modified: 12/6/2023
MEDIUM 5.5 PyPI
GHSA-5wpj-c6f7-24x8 · BIT-tensorflow-2022-29207, CVE-2022-29207 Undefined behavior when users supply invalid resource handles
Modified: 12/6/2023
HIGH 7.1 PyPI
GHSA-5xwc-mrhx-5g3m · BIT-tensorflow-2021-37657, CVE-2021-37657 Reference binding to nullptr in `MatrixDiagV*` ops
Modified: 3/14/2026
MEDIUM 6.5 PyPI
GHSA-627q-g293-49q7 · BIT-tensorflow-2022-23580, CVE-2022-23580 Abort caused by allocating a vector that is too large in Tensorflow
Modified: 11/7/2024
LOW 2.5 PyPI
GHSA-62gx-355r-9fhg · BIT-tensorflow-2021-29518, CVE-2021-29518 Session operations in eager mode lead to null pointer dereferences
Modified: 3/13/2026
HIGH 8.5 PyPI
GHSA-63xm-rx5p-xvqr · BIT-tensorflow-2020-15195, CVE-2020-15195 Heap buffer overflow in Tensorflow
Modified: 3/13/2026