HIGH8.1PyPI
GHSA-23hm-7w47-xw72· BIT-tensorflow-2022-21726, CVE-2022-21726Out of bounds read in Tensorflow
Modified: 9/10/2026
package
PyPI/tensorflow
pkg:pypi/tensorflow
MEDIUM5.9PyPI
GHSA-2475-53vw-vp25· BIT-tensorflow-2022-35968, CVE-2022-35968TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad`
Modified: 7/13/2026
HIGH7.5PyPI
GHSA-247x-2f9f-5wp7· BIT-tensorflow-2022-23591, CVE-2022-23591Stack overflow in TensorFlow
Modified: 7/13/2026
HIGH7.6PyPI
GHSA-24x4-6qmh-88qg· BIT-tensorflow-2022-23584, CVE-2022-23584Use after free in `DecodePng` kernel
Modified: 7/13/2026
LOW2.5PyPI
GHSA-24x6-8c7m-hv3f· BIT-tensorflow-2021-29590, CVE-2021-29590Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`
Modified: 7/8/2026
LOW2.5PyPI
GHSA-26j7-6w8w-7922· BIT-tensorflow-2021-29586, CVE-2021-29586Division by zero in optimized pooling implementations in TFLite
Modified: 7/8/2026
MEDIUM5.5PyPI
GHSA-278g-rq84-9hmg· BIT-tensorflow-2021-37673, CVE-2021-37673`CHECK`-fail in `MapStage`
Modified: 7/8/2026
MEDIUM5.5PyPI
GHSA-27j5-4p9v-pp67· BIT-tensorflow-2021-37644, CVE-2021-37644`std::abort` raised from `TensorListReserve`
Modified: 7/8/2026
MEDIUM5.5PyPI
GHSA-27qf-jwm8-g7f3· BIT-tensorflow-2021-37691, CVE-2021-37691FPE in LSH in TFLite
Modified: 7/8/2026
MEDIUM4.8PyPI
GHSA-27rc-728f-x5w2· BIT-tensorflow-2022-41899, CVE-2022-41899`CHECK` fail via inputs in `SdcaOptimizer`
Modified: 7/13/2026
LOW2.5PyPI
GHSA-2cpx-427x-q2c6· BIT-tensorflow-2021-29523, CVE-2021-29523CHECK-fail in AddManySparseToTensorsMap
Modified: 7/8/2026
LOW2.5PyPI
GHSA-2gfx-95x2-5v3x· BIT-tensorflow-2021-29536, CVE-2021-29536Heap buffer overflow in `QuantizedReshape`
Modified: 7/8/2026
MEDIUM5.5PyPI
GHSA-2p25-55c9-h58q· BIT-tensorflow-2021-41198, CVE-2021-41198Overflow/crash in `tf.tile` when tiling tensor is large
Modified: 7/8/2026
MEDIUM5.5PyPI
GHSA-2p9q-h29j-3f5v· BIT-tensorflow-2022-29193, CVE-2022-29193Missing validation causes `TensorSummaryV2` to crash
Modified: 7/13/2026
HIGH7.1PyPI
GHSA-2r2f-g8mw-9gvr· BIT-tensorflow-2022-29208, CVE-2022-29208Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Modified: 7/13/2026
HIGH7.3PyPI
GHSA-2r8p-fg3c-wcj4· BIT-tensorflow-2021-37654, CVE-2021-37654Heap OOB and CHECK fail in `ResourceGather`
Modified: 7/8/2026
MEDIUM5.5PyPI
GHSA-2vv3-56qg-g2cf· BIT-tensorflow-2022-29200, CVE-2022-29200Missing validation causes denial of service via `LSTMBlockCell`
Modified: 7/13/2026
MEDIUM5.5PyPI
GHSA-2wmv-37vq-52g5· BIT-tensorflow-2021-37668, CVE-2021-37668FPE in `tf.raw_ops.UnravelIndex`
Modified: 7/8/2026
LOW3.6PyPI
GHSA-2xgj-xhgf-ggjv· BIT-tensorflow-2021-29612, CVE-2021-29612Heap buffer overflow in `BandedTriangularSolve`
Modified: 7/8/2026
MEDIUM6.5PyPI
GHSA-34f9-hjfq-rr8j· BIT-tensorflow-2022-21729, CVE-2022-21729Overflow and uncaught divide by zero in Tensorflow
Modified: 9/10/2026
MEDIUM4.8PyPI
GHSA-368v-7v32-52fx· BIT-tensorflow-2022-41907, CVE-2022-41907Overflow in `ResizeNearestNeighborGrad`
Modified: 7/13/2026
LOW2.5PyPI
GHSA-36vm-xw34-x4pj· BIT-tensorflow-2021-29562, CVE-2021-29562CHECK-fail in `tf.raw_ops.IRFFT`
Modified: 7/8/2026
HIGH7.1PyPI
GHSA-374m-jm66-3vj8· BIT-tensorflow-2021-41226, CVE-2021-41226Heap OOB in `SparseBinCount`
Modified: 7/8/2026
MEDIUM5.9PyPI
GHSA-37jf-mjv6-xfqw· BIT-tensorflow-2022-35999, CVE-2022-35999TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`
Modified: 7/13/2026
LOW2.5PyPI
GHSA-393f-2jr3-cp69· BIT-tensorflow-2021-29533, CVE-2021-29533CHECK-fail in DrawBoundingBoxes
Modified: 7/8/2026
MEDIUM5.9PyPI
GHSA-397c-5g2j-qxpv· BIT-tensorflow-2022-35982, CVE-2022-35982TensorFlow vulnerable to segfault in `SparseBincount`
Modified: 7/13/2026
MEDIUM5.5PyPI
GHSA-3ff2-r28g-w7h9· BIT-tensorflow-2021-41216, CVE-2021-41216Heap buffer overflow in `Transpose`
Modified: 7/8/2026
LOW2.5PyPI
GHSA-3h8m-483j-7xxm· BIT-tensorflow-2021-29569, CVE-2021-29569Heap out of bounds read in `RequantizationRange`
Modified: 7/8/2026
MEDIUM6.6PyPI
GHSA-3hxh-8cp2-g4hg· BIT-tensorflow-2021-37690, CVE-2021-37690Use after free and segfault in shape inference functions
Modified: 7/8/2026
MEDIUM6.5PyPI
GHSA-3mw4-6rj6-74g5· BIT-tensorflow-2022-21739, CVE-2022-21739Null pointer dereference in TensorFlow
Modified: 9/10/2026
LOW2.5PyPI
GHSA-3qgw-p4fm-x7gf· BIT-tensorflow-2021-29594, CVE-2021-29594Division by zero in TFLite's convolution code
Modified: 7/8/2026
LOW2.5PyPI
GHSA-3qxp-qjq7-w4hf· BIT-tensorflow-2021-29531, CVE-2021-29531CHECK-fail in tf.raw_ops.EncodePng
Modified: 7/8/2026
HIGH7.5PyPI
GHSA-3rcw-9p9x-582v· BIT-tensorflow-2021-41228, CVE-2021-41228Code injection in `saved_model_cli`
Modified: 7/8/2026
LOW2.5PyPI
GHSA-3w67-q784-6w7c· BIT-tensorflow-2021-29589, CVE-2021-29589Division by zero in TFLite's implementation of `GatherNd`
Modified: 7/8/2026
LOW2.5PyPI
GHSA-4278-2v5v-65r4· BIT-tensorflow-2021-29512, CVE-2021-29512Heap buffer overflow in `RaggedBinCount`
Modified: 7/8/2026
MEDIUM6.5PyPI
GHSA-428x-9xc2-m8mj· BIT-tensorflow-2022-21741, CVE-2022-21741Division by zero in TFLite
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-43jf-985q-588j· BIT-tensorflow-2022-23586, CVE-2022-23586Multiple `CHECK`-fails in `function.cc` in TensowFlow
Modified: 7/13/2026
HIGH7.0PyPI
GHSA-43q8-3fv7-pr5xImproper Validation of Integrity Check Value in TensorFlow
Modified: 12/5/2024
HIGH7.6PyPI
GHSA-44qp-9wwf-734r· BIT-tensorflow-2022-21740, CVE-2022-21740Heap overflow in Tensorflow
Modified: 9/10/2026
LOW2.5PyPI
GHSA-452g-f7fp-9jf7· BIT-tensorflow-2021-29513, CVE-2021-29513Type confusion during tensor casts lead to dereferencing null pointers
Modified: 7/8/2026
HIGH7.5PyPI
GHSA-49rq-hwc3-x77w· BIT-tensorflow-2023-25670, CVE-2023-25670TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
Modified: 9/10/2026
HIGH7.1PyPI
GHSA-49rx-x2rw-pc6f· BIT-tensorflow-2021-41205, CVE-2021-41205Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops
Modified: 7/8/2026
MEDIUM4.4PyPI
GHSA-4c4g-crqm-xrxw· BIT-tensorflow-2021-37682, CVE-2021-37682Use of unitialized value in TFLite
Modified: 7/8/2026
HIGH7.8PyPI
GHSA-4f99-p9c2-3j8x· BIT-tensorflow-2021-41219, CVE-2021-41219Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
Modified: 7/8/2026
LOW2.5PyPI
GHSA-4fg4-p75j-w5xj· BIT-tensorflow-2021-29547, CVE-2021-29547Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization`
Modified: 7/8/2026
MEDIUM5.3PyPI
GHSA-4g9f-63rx-5cw4· BIT-tensorflow-2020-15190, CVE-2020-15190Segfault in Tensorflow
Modified: 7/8/2026
LOW2.5PyPI
GHSA-4hrh-9vmp-2jgg· BIT-tensorflow-2021-29542, CVE-2021-29542Heap buffer overflow in `StringNGrams`
Modified: 7/8/2026
HIGH8.8PyPI
GHSA-4hvf-hxvg-f67v· BIT-tensorflow-2022-23560, CVE-2022-23560Read and Write outside of bounds in TensorFlow
Modified: 7/13/2026
LOW2.5PyPI
GHSA-4hvv-7x94-7vq8· BIT-tensorflow-2021-29616, CVE-2021-29616Null dereference in Grappler's `TrySimplify`
Modified: 7/8/2026
MEDIUM6.5PyPI
GHSA-4j82-5ccr-4r8v· BIT-tensorflow-2022-23582, CVE-2022-23582`CHECK`-failures in `TensorByteSize` in Tensorflow
Modified: 7/13/2026
LOW2.5PyPI
GHSA-4p4p-www8-8fv9· BIT-tensorflow-2021-29568, CVE-2021-29568Reference binding to null in `ParameterizedTruncatedNormal`
Modified: 7/8/2026
MEDIUM5.9PyPI
GHSA-4pc4-m9mj-v2r9· BIT-tensorflow-2022-35972, CVE-2022-35972TensorFlow vulnerable to segfault in `QuantizedBiasAdd`
Modified: 7/13/2026
MEDIUM6.5PyPI
GHSA-4v5p-v5h9-6xjx· BIT-tensorflow-2022-23565, CVE-2022-23565`CHECK`-failures in Tensorflow
Modified: 7/13/2026
LOW2.5PyPI
GHSA-4vf2-4xcg-65cx· BIT-tensorflow-2021-29526, CVE-2021-29526Division by 0 in `Conv2D`
Modified: 7/8/2026
LOW2.5PyPI
GHSA-4vrf-ff7v-hpgr· BIT-tensorflow-2021-29596, CVE-2021-29596Division by zero in TFLite's implementation of `EmbeddingLookup`
Modified: 7/8/2026
MEDIUM5.9PyPI
GHSA-4w68-4x85-mjj9· BIT-tensorflow-2022-35966, CVE-2022-35966TensorFlow vulnerable to segfault in `QuantizedAvgPool`
Modified: 7/13/2026
HIGH7.1PyPI
GHSA-4xfp-4pfp-89wg· BIT-tensorflow-2021-37656, CVE-2021-37656Reference binding to nullptr in `RaggedTensorToSparse`
Modified: 7/8/2026
LOW2.5PyPI
GHSA-545v-42p7-98fq· BIT-tensorflow-2021-29570, CVE-2021-29570Heap out of bounds read in `MaxPoolGradWithArgmax`
Modified: 7/8/2026
MEDIUM5.5PyPI
GHSA-54ch-gjq5-4976· BIT-tensorflow-2022-29205, CVE-2022-29205Segfault due to missing support for quantized types
Modified: 7/13/2026
MEDIUM4.8PyPI
GHSA-54pp-c6pp-7fpx· BIT-tensorflow-2022-41886, CVE-2022-41886Overflow in `ImageProjectiveTransformV2`
Modified: 7/13/2026
HIGH7.5PyPI
GHSA-558h-mq8x-7q9g· BIT-tensorflow-2023-25665, CVE-2023-25665TensorFlow has Null Pointer Error in SparseSparseMaximum
Modified: 9/10/2026
CRITICAL9.3PyPI
GHSA-57wx-m983-2f88· BIT-tensorflow-2021-41208, CVE-2021-41208Incomplete validation in boosted trees code
Modified: 7/8/2026
MEDIUM5.5PyPI
GHSA-5889-7v45-q28m· BIT-tensorflow-2022-29213, CVE-2022-29213Incomplete validation in signal ops leads to crashes in TensorFlow
Modified: 7/13/2026
LOW2.5PyPI
GHSA-59q2-x2qc-4c97· BIT-tensorflow-2021-29559, CVE-2021-29559Heap OOB access in unicode ops
Modified: 7/8/2026
MEDIUM5.5PyPI
GHSA-5crj-c72x-m7gq· BIT-tensorflow-2021-41217, CVE-2021-41217Null pointer exception when `Exit` node is not preceded by `Enter` op
Modified: 7/8/2026
MEDIUM6.5PyPI
GHSA-5f2r-qp73-37mr· BIT-tensorflow-2022-23579, CVE-2022-23579`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
Modified: 7/13/2026
LOW2.5PyPI
GHSA-5gqf-456p-4836· BIT-tensorflow-2021-29572, CVE-2021-29572Reference binding to nullptr in `SdcaOptimizer`
Modified: 7/8/2026
MEDIUM5.5PyPI
GHSA-5hj3-vjjf-f5m7· BIT-tensorflow-2021-37672, CVE-2021-37672Heap OOB in `SdcaOptimizerV2`
Modified: 7/8/2026
MEDIUM5.5PyPI
GHSA-5hx2-qx8j-qjqm· BIT-tensorflow-2021-41199, CVE-2021-41199Overflow/crash in `tf.image.resize` when size is large
Modified: 7/8/2026
HIGH8.8PyPI
GHSA-5qw5-89mw-wcg2· BIT-tensorflow-2022-23566, CVE-2022-23566Out of bounds write in Tensorflow
Modified: 7/13/2026
MEDIUM5.5PyPI
GHSA-5v77-j66x-4c4g· BIT-tensorflow-2022-29196, CVE-2022-29196Missing validation causes denial of service via `Conv3DBackpropFilterV2`
Modified: 7/13/2026
HIGH7.5PyPI
GHSA-5w96-866f-6rm8· BIT-tensorflow-2023-27579, CVE-2023-27579TensorFlow has Floating Point Exception in TFLite in conv kernel
Modified: 9/10/2026
MEDIUM5.5PyPI
GHSA-5wpj-c6f7-24x8· BIT-tensorflow-2022-29207, CVE-2022-29207Undefined behavior when users supply invalid resource handles
Modified: 7/13/2026
HIGH7.1PyPI
GHSA-5xwc-mrhx-5g3m· BIT-tensorflow-2021-37657, CVE-2021-37657Reference binding to nullptr in `MatrixDiagV*` ops
Modified: 7/8/2026
MEDIUM6.5PyPI
GHSA-627q-g293-49q7· BIT-tensorflow-2022-23580, CVE-2022-23580Abort caused by allocating a vector that is too large in Tensorflow
Modified: 7/13/2026
LOW2.5PyPI
GHSA-62gx-355r-9fhg· BIT-tensorflow-2021-29518, CVE-2021-29518Session operations in eager mode lead to null pointer dereferences
Modified: 7/8/2026
HIGH8.5PyPI
GHSA-63xm-rx5p-xvqr· BIT-tensorflow-2020-15195, CVE-2020-15195Heap buffer overflow in Tensorflow
Modified: 7/8/2026
MEDIUM6.5PyPI
GHSA-6445-fm66-fvq2· BIT-tensorflow-2022-23568, CVE-2022-23568Integer overflows in Tensorflow
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-647v-r7qq-24fh· BIT-tensorflow-2023-25673, CVE-2023-25673TensorFlow has Floating Point Exception in TensorListSplit with XLA
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-64jg-wjww-7c5w· BIT-tensorflow-2023-25663, CVE-2023-25663TensorFlow has Null Pointer Error in TensorArrayConcatV2
Modified: 9/10/2026
MEDIUM4.8PyPI
GHSA-66vq-54fq-6jvv· BIT-tensorflow-2022-41891, CVE-2022-41891Segfault in `tf.raw_ops.TensorListConcat`
Modified: 7/13/2026
MEDIUM4.8PyPI
GHSA-67pf-62xr-q35m· BIT-tensorflow-2022-41893, CVE-2022-41893`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
Modified: 7/13/2026
MEDIUM5.9PyPI
GHSA-689c-r7h2-fv9v· BIT-tensorflow-2022-35973, CVE-2022-35973TensorFlow vulnerable to segfault in `QuantizedMatMul`
Modified: 7/13/2026
HIGH7.5PyPI
GHSA-68v3-g9cm-rmm6· BIT-tensorflow-2023-25658, CVE-2023-25658TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
Modified: 9/10/2026
LOW2.5PyPI
GHSA-6f84-42vf-ppwp· BIT-tensorflow-2021-29528, CVE-2021-29528Division by 0 in `QuantizedMul`
Modified: 9/10/2026
LOW2.5PyPI
GHSA-6f89-8j54-29xf· BIT-tensorflow-2021-29578, CVE-2021-29578Heap buffer overflow in `FractionalAvgPoolGrad`
Modified: 7/8/2026
LOW2.5PyPI
GHSA-6g85-3hm8-83f9· BIT-tensorflow-2021-29544, CVE-2021-29544CHECK-fail in `QuantizeAndDequantizeV4Grad`
Modified: 7/8/2026
HIGH8.1PyPI
GHSA-6gmv-pjp9-p8w8· BIT-tensorflow-2022-21728, CVE-2022-21728Out of bounds read in Tensorflow
Modified: 9/10/2026
HIGH7.7PyPI
GHSA-6gv8-p3vj-pxvr· BIT-tensorflow-2021-37649, CVE-2021-37649Null pointer dereference in `UncompressElement`
Modified: 7/8/2026
HIGH7.5PyPI
GHSA-6hg6-5c2q-7rcr· BIT-tensorflow-2023-25664, CVE-2023-25664TensorFlow has Heap-buffer-overflow in AvgPoolGrad
Modified: 9/10/2026
MEDIUM5.5PyPI
GHSA-6hpv-v2rx-c5g6· BIT-tensorflow-2021-41209, CVE-2021-41209FPE in convolutions with zero size filters
Modified: 7/8/2026
LOW2.5PyPI
GHSA-6j9c-grc6-5m6g· BIT-tensorflow-2021-29534, CVE-2021-29534CHECK-fail in SparseConcat
Modified: 7/8/2026
HIGH7.1PyPI
GHSA-6p5r-g9mq-ggh2· BIT-tensorflow-2021-37658, CVE-2021-37658Reference binding to nullptr in `MatrixSetDiagV*` ops
Modified: 7/8/2026
LOW2.5PyPI
GHSA-6qgm-fv6v-rfpv· BIT-tensorflow-2021-29575, CVE-2021-29575Overflow/denial of service in `tf.raw_ops.ReverseSequence`
Modified: 7/8/2026
HIGH7.5PyPI
GHSA-6wfh-89q8-44jq· BIT-tensorflow-2023-25676, CVE-2023-25676TensorFlow has null dereference on ParallelConcat with XLA
Modified: 9/10/2026
MEDIUM4.8PyPI
GHSA-6x99-gv2v-q76v· BIT-tensorflow-2022-41888, CVE-2022-41888FPE in `tf.image.generate_bounding_box_proposals`
Modified: 7/13/2026
HIGH7.8PyPI
GHSA-75c9-jrh4-79mc· BIT-tensorflow-2022-29216, CVE-2022-29216Code injection in `saved_model_cli` in TensorFlow
Modified: 7/13/2026
LOW2.5PyPI
GHSA-75f6-78jr-4656· BIT-tensorflow-2021-29564, CVE-2021-29564Null pointer dereference in `EditDistance`
Modified: 7/8/2026
MEDIUM4.8PyPI
GHSA-762h-vpvw-3rcx· BIT-tensorflow-2022-41885, CVE-2022-41885Overflow in `FusedResizeAndPadConv2D`
Modified: 7/13/2026
LOW2.5PyPI
GHSA-772j-h9xw-ffp5· BIT-tensorflow-2021-29519, CVE-2021-29519CHECK-fail in SparseCross due to type confusion
Modified: 7/8/2026