Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-6w62-hx7r-mw68
    Fix available
    Packages

    com.thoughtworks.xstream:xstream

    Summary

    XStream is vulnerable to an Arbitrary Code Execution attack

    Published
    25 Aug 2021
    GHSA-xj6r-2jpm-qvxp
    Fix available
    Packages

    @asyncapi/java-spring-cloud-stream-template

    Summary

    Code injection issue for java-spring-cloud-stream-template

    Published
    25 Aug 2021
    GHSA-q7cg-43mg-qp69
    Fix available
    Packages

    Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.AspNetCore.Authentication.JwtBearer

    Summary

    ASP.NET Core Information Disclosure Vulnerability

    Published
    25 Aug 2021
    GHSA-hr3h-x6gq-rqcp
    Fix available
    Packages

    contao/core-bundle, contao/contao, contao/contao, contao/contao, contao/core-bundle, contao/core-bundle

    Summary

    Cross site scripting via HTML attributes in the back end

    Published
    25 Aug 2021
    GHSA-jqfh-8hw5-fqjr
    Fix available
    Packages

    detect-character-encoding

    Summary

    Improper Handling of Exceptional Conditions in detect-character-encoding

    Published
    25 Aug 2021
    Packages

    squid

    Summary

    Fix of CVE: CVE-2020-14058, CVE-2020-15049

    Published
    25 Aug 2021
    GHSA-cgfm-62j4-v4rf
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap out of bounds access in sparse reduction operations

    Published
    25 Aug 2021
    GHSA-hp4c-x6r7-6555
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Floating point exception in `SparseDenseCwiseDiv`

    Published
    25 Aug 2021
    GHSA-c9qf-r67m-p7cg
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Null pointer dereference in `CompressElement`

    Published
    25 Aug 2021
    GHSA-hwr7-8gxx-fj5p
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Null pointer dereference in `RaggedTensorToTensor`

    Published
    25 Aug 2021
    GHSA-gh6x-4whr-2qv4
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Null pointer dereference and heap OOB read in operations restoring tensors

    Published
    25 Aug 2021
    GHSA-95xm-g58g-3p88
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Integer division by 0 in sparse reshaping

    Published
    25 Aug 2021
    GHSA-9c8h-vvrj-w2p8
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap OOB in `RaggedGather`

    Published
    25 Aug 2021
    GHSA-ch4f-829c-v5pw
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Division by 0 in `ResourceScatterDiv`

    Published
    25 Aug 2021
    GHSA-fcwc-p4fc-c5cc
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Null pointer dereference in `MatrixDiagPartOp`

    Published
    25 Aug 2021
    GHSA-27j5-4p9v-pp67
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    `std::abort` raised from `TensorListReserve`

    Published
    25 Aug 2021
    GHSA-9w2p-5mgw-p94c
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Integer overflow due to conversion to unsigned

    Published
    25 Aug 2021
    GHSA-h6jh-7gv5-28vg
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Bad alloc in `StringNGrams` caused by integer conversion

    Published
    25 Aug 2021
    GHSA-c5x2-p679-95wc
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Null pointer dereference in `SparseTensorSliceDataset`

    Published
    25 Aug 2021
    GHSA-wp77-4gmm-7cq8
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Incorrect validation of `SaveV2` inputs

    Published
    25 Aug 2021
    GHSA-6gv8-p3vj-pxvr
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Null pointer dereference in `UncompressElement`

    Published
    25 Aug 2021
    GHSA-f8h4-7rgh-q2gm
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord`

    Published
    25 Aug 2021
    GHSA-hpv4-7p9c-mvfr
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap buffer overflow in `FractionalAvgPoolGrad`

    Published
    25 Aug 2021
    GHSA-m7fm-4jfh-jrg6
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Use after free in boosted trees creation

    Published
    25 Aug 2021
    GHSA-qjj8-32p7-h289
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Division by 0 in `ResourceGather`

    Published
    25 Aug 2021
    GHSA-2r8p-fg3c-wcj4
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap OOB and CHECK fail in `ResourceGather`

    Published
    25 Aug 2021
    GHSA-7fvx-3jfc-2cpc
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap OOB in `ResourceScatterUpdate`

    Published
    25 Aug 2021
    GHSA-4xfp-4pfp-89wg
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Reference binding to nullptr in `RaggedTensorToSparse`

    Published
    25 Aug 2021
    GHSA-5xwc-mrhx-5g3m
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Reference binding to nullptr in `MatrixDiagV*` ops

    Published
    25 Aug 2021
    GHSA-6p5r-g9mq-ggh2
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Reference binding to nullptr in `MatrixSetDiagV*` ops

    Published
    25 Aug 2021
    GHSA-q3g3-h9r4-prrc
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Reference binding to nullptr and heap OOB in binary cwise ops

    Published
    25 Aug 2021
    GHSA-cm5x-837x-jf3c
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Division by 0 in inplace operations

    Published
    25 Aug 2021
    GHSA-gf88-j2mg-cc82
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Crash caused by integer conversion to unsigned

    Published
    25 Aug 2021
    GHSA-f5cx-5wr3-5qrc
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Reference binding to nullptr in boosted trees

    Published
    25 Aug 2021
    GHSA-g25h-jr74-qp5j
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Incomplete validation in `QuantizeV2`

    Published
    25 Aug 2021
    GHSA-r4c4-5fpq-56wg
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap OOB in boosted trees

    Published
    25 Aug 2021
    GHSA-v82p-hv3v-p6qp
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Incomplete validation in MKL requantization

    Published
    25 Aug 2021
    GHSA-w4xf-2pqw-5mq7
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Reference binding to nullptr in `RaggedTensorToVariant`

    Published
    25 Aug 2021
    GHSA-w74j-v8xh-3w5h
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Reference binding to nullptr in unicode encoding

    Published
    25 Aug 2021
    GHSA-2wmv-37vq-52g5
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    FPE in `tf.raw_ops.UnravelIndex`

    Published
    25 Aug 2021
    GHSA-vmjw-c2vp-p33c
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Crash in NMS ops caused by integer conversion to unsigned

    Published
    25 Aug 2021
    GHSA-9697-98pf-4rw7
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap OOB in `UpperBound` and `LowerBound`

    Published
    25 Aug 2021
    GHSA-qr82-2c78-4m8h
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Reference binding to nullptr in map operations

    Published
    25 Aug 2021
    GHSA-5hj3-vjjf-f5m7
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap OOB in `SdcaOptimizerV2`

    Published
    25 Aug 2021
    GHSA-278g-rq84-9hmg
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    `CHECK`-fail in `MapStage`

    Published
    25 Aug 2021
    GHSA-7ghq-fvr3-pj2x
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Incomplete validation in `MaxPoolGrad`

    Published
    25 Aug 2021
    GHSA-9c8h-2mv3-49ww
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Division by 0 in most convolution operators

    Published
    25 Aug 2021
    GHSA-v768-w7m9-2vmm
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Reference binding to nullptr in shape inference

    Published
    25 Aug 2021
    GHSA-qfpc-5pjr-mh26
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Missing validation in shape inference for `Dequantize`

    Published
    25 Aug 2021
    GHSA-r6jx-9g48-2r5r
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Arbitrary code execution due to YAML deserialization

    Published
    25 Aug 2021