Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-828c-5j5q-vrjq
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef`

    Published
    16 Sept 2022
    CVE-2022-35990
    Fix available
    Packages

    Summary

    `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient` in TensorFlow

    Published
    16 Sept 2022
    GHSA-fv43-93gv-vm8f
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to null dereference on MLIR on empty function attributes

    Published
    16 Sept 2022
    GHSA-wqmc-pm8c-2jhc
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to segfault in `Requantize`

    Published
    16 Sept 2022
    CVE-2022-35986
    Fix available
    Packages

    Summary

    Segfault in `RaggedBincount` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35987
    Fix available
    Packages

    Summary

    `CHECK` fail in `DenseBincount` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35985
    Fix available
    Packages

    Summary

    `CHECK` fail in `LRNGrad` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35984
    Fix available
    Packages

    Summary

    `CHECK` fail in `ParameterizedTruncatedNormal` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35983
    Fix available
    Packages

    Summary

    `CHECK` fail in `Save` and `SaveSlices` in TensorFlow

    Published
    16 Sept 2022
    GHSA-cv2p-32v3-vhwq
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK` fail in `RandomPoissonV2`

    Published
    16 Sept 2022
    CVE-2022-40757
    Fix available
    Packages

    Summary

    Published
    16 Sept 2022
    CVE-2022-40758
    Fix available
    Packages

    Summary

    Published
    16 Sept 2022
    CVE-2022-40759
    Fix available
    Packages

    Summary

    Published
    16 Sept 2022
    CVE-2022-40760
    Fix available
    Packages

    Summary

    Published
    16 Sept 2022
    CVE-2022-40761
    Fix available
    Packages

    Summary

    Published
    16 Sept 2022
    CVE-2022-40762
    Fix available
    Packages

    Summary

    Published
    16 Sept 2022
    CVE-2022-35989
    Fix available
    Packages

    Summary

    `CHECK` fail in `MaxPool` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35988
    Fix available
    Packages

    Summary

    `CHECK` fail in `tf.linalg.matrix_rank` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35982
    Fix available
    Packages

    Summary

    Segfault in `SparseBincount` in TensorFlow

    Published
    16 Sept 2022
    GHSA-r26c-679w-mrjm
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsGradient`

    Published
    16 Sept 2022
    GHSA-g9h5-vr8m-x2h4
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK` fail in `AudioSummaryV2`

    Published
    16 Sept 2022
    GHSA-4p6f-m4f9-ch88
    Fix available
    Packages

    github.com/gagliardetto/binary

    Summary

    Binary vulnerable to Slice Memory Allocation with Excessive Size Value

    Published
    16 Sept 2022
    GHSA-mv8m-8x97-937q
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK` fail in `tf.random.gamma`

    Published
    16 Sept 2022
    GHSA-g468-qj8g-vcjc
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs`

    Published
    16 Sept 2022
    GHSA-mv8x-668m-53fg
    Fix available
    Packages

    github.com/ElrondNetwork/elrond-go

    Summary

    Elrond-go has improper initialization

    Published
    16 Sept 2022
    GHSA-7j3m-8g3c-9qqq
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to null-dereference in `mlir::tfg::TFOp::nameAttr`

    Published
    16 Sept 2022
    GHSA-rh87-q4vg-m45j
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to integer overflow in math ops

    Published
    16 Sept 2022
    GHSA-jvhc-5hhr-w3v5
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to assertion fail on MLIR empty edge names

    Published
    16 Sept 2022
    GHSA-w62h-8xjm-fv49
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK` fail in `DenseBincount`

    Published
    16 Sept 2022
    GHSA-mgmh-g2v6-mqw5
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK` failure in `AvgPoolOp`

    Published
    16 Sept 2022
    GHSA-2m6g-crv8-p3c6
    Fix available
    Packages

    parse-server, parse-server

    Summary

    Parse Server vulnerable to brute force guessing of user sensitive data via search patterns

    Published
    16 Sept 2022
    GHSA-9cr2-8pwr-fhfq
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK` fail in `QuantizeAndDequantizeV3`

    Published
    16 Sept 2022
    CVE-2022-35981
    Fix available
    Packages

    Summary

    `CHECK` fail in `FractionalMaxPoolGrad` in TensorFlow

    Published
    16 Sept 2022
    GHSA-m6cv-4fmf-66xf
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK` fail in `RaggedTensorToVariant`

    Published
    16 Sept 2022
    GHSA-9j4v-pp28-mxv7
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel`

    Published
    16 Sept 2022
    CVE-2022-35979
    Fix available
    Packages

    Summary

    Segfault in `QuantizedRelu` and `QuantizedRelu6`

    Published
    16 Sept 2022
    GHSA-p75v-367r-2v23
    Fix available
    Packages

    cell-project

    Summary

    `cell-project` used incorrect variance when projecting through `&Cell<T>`

    Published
    16 Sept 2022
    GHSA-79h2-q768-fpxr
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions

    Published
    16 Sept 2022
    GHSA-54qx-8p8w-xhg8
    Fix available
    Packages

    github.com/drakkan/sftpgo/v2

    Summary

    SFTPGo vulnerable to recovery codes abuse

    Published
    16 Sept 2022
    CVE-2022-35974
    Fix available
    Packages

    Summary

    Segfault in `QuantizeDownAndShrinkRange` in TensorFlow

    Published
    16 Sept 2022
    GHSA-fxwr-4vq9-9vhj
    Fix available
    Packages

    org.xwiki.platform:xwiki-platform-web-templates, org.xwiki.platform:xwiki-platform-web-templates

    Summary

    XWiki Cross-Site Request Forgery (CSRF) for actions on tags

    Published
    16 Sept 2022
    GHSA-ffjm-4qwc-7cmf
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to OOB write in `scatter_nd` in TF Lite

    Published
    16 Sept 2022
    GHSA-pxrw-j2fv-hx3h
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

    Published
    16 Sept 2022
    GHSA-v8gq-5grq-9728
    Fix available
    Packages

    mozjpeg

    Summary

    mozjpeg DecompressScanlines::read_scanlines is Unsound

    Published
    16 Sept 2022
    GHSA-74w3-p89x-ffgh
    No fix available
    Packages

    ansi_term

    Summary

    ansi_term is Unmaintained

    Published
    16 Sept 2022
    GHSA-6vfq-jmxg-g58r
    Fix available
    Packages

    shopware/shopware

    Summary

    Shopware contains sensitive data in backend customer module

    Published
    16 Sept 2022
    GHSA-3pgj-pg6c-r5p7
    Fix available
    Packages

    oauthlib

    Summary

    OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI

    Published
    16 Sept 2022
    GHSA-qc43-pgwq-3q2q
    Fix available
    Packages

    shopware/shopware

    Summary

    Shopware access control list bypassed via crafted specific URLs

    Published
    16 Sept 2022
    GHSA-rc4r-wh2q-q6c4
    Fix available
    Packages

    github.com/docker/docker

    Summary

    Docker supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions

    Published
    16 Sept 2022
    CVE-2022-35972
    Fix available
    Packages

    Summary

    Segfault in `QuantizedBiasAdd` in TensorFlow

    Published
    16 Sept 2022