Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Use after free and segfault in shape inference functions BIT-tensorflow-2021-37690, CVE-2021-37690, GHSA-3hxh-8cp2-g4hg, PYSEC-2021-312, PYSEC-2021-603, PYSEC-2021-801 | Medium | 0.2% | 13 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
FPE in `tf.raw_ops.UnravelIndex` BIT-tensorflow-2021-37668, CVE-2021-37668, GHSA-2wmv-37vq-52g5, PYSEC-2021-290, PYSEC-2021-581, PYSEC-2021-779 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Crash in NMS ops caused by integer conversion to unsigned BIT-tensorflow-2021-37669, CVE-2021-37669, GHSA-vmjw-c2vp-p33c, PYSEC-2021-291, PYSEC-2021-582, PYSEC-2021-780 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in `UpperBound` and `LowerBound` BIT-tensorflow-2021-37670, CVE-2021-37670, GHSA-9697-98pf-4rw7, PYSEC-2021-292, PYSEC-2021-583, PYSEC-2021-781 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in `SdcaOptimizerV2` BIT-tensorflow-2021-37672, CVE-2021-37672, GHSA-5hj3-vjjf-f5m7, PYSEC-2021-294, PYSEC-2021-585, PYSEC-2021-783 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-fail in `MapStage` BIT-tensorflow-2021-37673, CVE-2021-37673, GHSA-278g-rq84-9hmg, PYSEC-2021-295, PYSEC-2021-586, PYSEC-2021-784 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in `MaxPoolGrad` BIT-tensorflow-2021-37674, CVE-2021-37674, GHSA-7ghq-fvr3-pj2x, PYSEC-2021-296, PYSEC-2021-587, PYSEC-2021-785 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Missing validation in shape inference for `Dequantize` BIT-tensorflow-2021-37677, CVE-2021-37677, GHSA-qfpc-5pjr-mh26, PYSEC-2021-299, PYSEC-2021-590, PYSEC-2021-788 | Medium | 0.1% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
FPE in TFLite division operations BIT-tensorflow-2021-37683, CVE-2021-37683, GHSA-rhrq-64mq-hf9h, PYSEC-2021-305, PYSEC-2021-596, PYSEC-2021-794 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
FPE in TFLite pooling operations BIT-tensorflow-2021-37684, CVE-2021-37684, GHSA-q7f7-544h-67h9, PYSEC-2021-306, PYSEC-2021-597, PYSEC-2021-795 | Medium | 0.1% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in TFLite BIT-tensorflow-2021-37685, CVE-2021-37685, GHSA-c545-c4f9-rf6v, PYSEC-2021-307, PYSEC-2021-598, PYSEC-2021-796 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in TFLite's `Gather*` implementations BIT-tensorflow-2021-37687, CVE-2021-37687, GHSA-jwf9-w5xm-f437, PYSEC-2021-309, PYSEC-2021-600, PYSEC-2021-798 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
FPE in LSH in TFLite BIT-tensorflow-2021-37691, CVE-2021-37691, GHSA-27qf-jwm8-g7f3, PYSEC-2021-313, PYSEC-2021-604, PYSEC-2021-802 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault on strings tensors with mistmatched dimensions, due to Go code BIT-tensorflow-2021-37692, CVE-2021-37692, GHSA-cmgw-8vpc-rc59, PYSEC-2021-314, PYSEC-2021-605, PYSEC-2021-803 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in most convolution operators BIT-tensorflow-2021-37675, CVE-2021-37675, GHSA-9c8h-2mv3-49ww, PYSEC-2021-297, PYSEC-2021-588, PYSEC-2021-786 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite BIT-tensorflow-2021-37680, CVE-2021-37680, GHSA-cfpj-3q4c-jhvr, PYSEC-2021-302, PYSEC-2021-593, PYSEC-2021-791 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Infinite loop in TFLite BIT-tensorflow-2021-37686, CVE-2021-37686, GHSA-mhhc-q96p-mfm9, PYSEC-2021-308, PYSEC-2021-599, PYSEC-2021-797 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`std::abort` raised from `TensorListReserve` BIT-tensorflow-2021-37644, CVE-2021-37644, GHSA-27j5-4p9v-pp67, PYSEC-2021-266, PYSEC-2021-557, PYSEC-2021-755 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow due to conversion to unsigned BIT-tensorflow-2021-37645, CVE-2021-37645, GHSA-9w2p-5mgw-p94c, PYSEC-2021-267, PYSEC-2021-558, PYSEC-2021-756 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Bad alloc in `StringNGrams` caused by integer conversion BIT-tensorflow-2021-37646, CVE-2021-37646, GHSA-h6jh-7gv5-28vg, PYSEC-2021-268, PYSEC-2021-559, PYSEC-2021-757 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Crash caused by integer conversion to unsigned BIT-tensorflow-2021-37661, CVE-2021-37661, GHSA-gf88-j2mg-cc82, PYSEC-2021-283, PYSEC-2021-574, PYSEC-2021-772 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Floating point exception in `SparseDenseCwiseDiv` BIT-tensorflow-2021-37636, CVE-2021-37636, GHSA-hp4c-x6r7-6555, PYSEC-2021-258, PYSEC-2021-549, PYSEC-2021-747 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer division by 0 in sparse reshaping BIT-tensorflow-2021-37640, CVE-2021-37640, GHSA-95xm-g58g-3p88, PYSEC-2021-262, PYSEC-2021-553, PYSEC-2021-751 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `ResourceScatterDiv` BIT-tensorflow-2021-37642, CVE-2021-37642, GHSA-ch4f-829c-v5pw, PYSEC-2021-264, PYSEC-2021-555, PYSEC-2021-753 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `ResourceGather` BIT-tensorflow-2021-37653, CVE-2021-37653, GHSA-qjj8-32p7-h289, PYSEC-2021-275, PYSEC-2021-566, PYSEC-2021-764 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in inplace operations BIT-tensorflow-2021-37660, CVE-2021-37660, GHSA-cm5x-837x-jf3c, PYSEC-2021-282, PYSEC-2021-573, PYSEC-2021-771 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Open Redirect in Flask-User CVE-2021-23401, GHSA-4298-89hc-6rfv, PYSEC-2021-337, SNYK-PYTHON-FLASKUSER-1293188 | Medium | 1.1% | 05 Jul, 2021 | PyPI Flask-User PyPI flask-user |
Plone has stored XSS in folder contents CVE-2021-35959, GHSA-qfhw-fv3g-v836, PYSEC-2021-110 | Medium | 0.5% | 30 Jun, 2021 | PyPI plone |
Cross-site Scripting in wagtail CVE-2021-32681, GHSA-xfrw-hxr5-ghqf, PYSEC-2021-103 | Medium | 1.1% | 17 Jun, 2021 | PyPI wagtail |
Open redirect in Flask-Unchained CVE-2021-23393, GHSA-pjc4-3w99-j7v4, PYSEC-2021-96, SNYK-PYTHON-FLASKUNCHAINED-1293189 | Medium | 0.7% | 11 Jun, 2021 | PyPI Flask-Unchained PyPI flask-unchained |
Path Traversal in Django BIT-django-2021-33203, CVE-2021-33203, GHSA-68w8-qjq3-2gfm, PYSEC-2021-98 | Medium | 2.7% | 08 Jun, 2021 | PyPI Django PyPI django |
Insufficient Verification of Data Authenticity in Pillow BIT-pillow-2021-28678, CVE-2021-28678, GHSA-hjfx-8p6c-g7gx, PYSEC-2021-94 | Medium | 0.7% | 02 Jun, 2021 | PyPI Pillow PyPI pillow |
Temporary urls leaked via logging CVE-2017-8761, GHSA-8fxc-qm65-vpxg, PYSEC-2026-751 | Medium | 0.8% | 02 Jun, 2021 | PyPI swift |
Improper Verification of Cryptographic Signature in aws-encryption-sdk-cli GHSA-89v2-g37m-g3ff | Medium | Not scored | 01 Jun, 2021 | PyPI aws-encryption-sdk-cli |
Improper Verification of Cryptographic Signature in aws-encryption-sdk GHSA-x5h4-9gqw-942j | Medium | Not scored | 01 Jun, 2021 | PyPI aws-encryption-sdk |
Insufficiently random values in Ansible CVE-2020-10729, GHSA-r6h7-5pq2-j77h, PYSEC-2021-105 | Medium | 0.4% | 27 May, 2021 | PyPI ansible |
Observable Response Discrepancy in Flask-AppBuilder BIT-airflow-2021-29621, CVE-2021-29621, GHSA-434h-p4gx-jm89, PYSEC-2021-90 | Medium | 3.4% | 27 May, 2021 | PyPI Flask-AppBuilder PyPI flask-appbuilder |
Insertion of Sensitive Information into Log File in ansible CVE-2021-20191, GHSA-8f4m-hccc-8qph, PYSEC-2021-124 | Medium | 0.3% | 26 May, 2021 | PyPI ansible |
Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone CVE-2021-33507, GHSA-35rg-466w-77h3, PYSEC-2021-79, PYSEC-2026-2961, PYSEC-2026-2967 | Medium | 0.8% | 21 May, 2021 | PyPI Plone PyPI Products.CMFCore PyPI Products.PluggableAuthService PyPI plone +2 more |
Cross-site scripting in Plone CVE-2021-33508, GHSA-rmpv-rcp6-v8wc, PYSEC-2021-80 | Medium | 0.6% | 21 May, 2021 | PyPI Plone PyPI plone |
Server-Side Request Forgery in Plone CVE-2021-33510, GHSA-4mg4-wvmx-5332, PYSEC-2021-82 | Medium | 1.0% | 21 May, 2021 | PyPI Plone PyPI plone |
Cross-site scripting in Plone CVE-2021-33512, GHSA-hm2h-f456-6j88, PYSEC-2021-84 | Medium | 0.7% | 21 May, 2021 | PyPI Plone PyPI plone |
Cross-site scripting in Plone CVE-2021-33513, GHSA-fj67-w3m4-rfmp, PYSEC-2021-85 | Medium | 0.7% | 21 May, 2021 | PyPI Plone PyPI plone |
Plone XSS in User Fullname Property and File Upload CVE-2021-3313, GHSA-hprr-4vfq-fcxw, PYSEC-2021-78 | Medium | 1.0% | 20 May, 2021 | PyPI plone |
Denial of service (via resource exhaustion) due to improper input validation in third-party identifier endpoint GHSA-7h5v-85w9-pq6c | Medium | Not scored | 19 May, 2021 | PyPI matrix-synapse |
Open Redirect in Flask-Security-Too CVE-2021-32618, GHSA-6qmf-fj6m-686c, PYSEC-2021-123 | Medium | 2.8% | 17 May, 2021 | PyPI Flask-Security-Too PyPI flask-security-too |
Null pointer dereference via invalid Ragged Tensors BIT-tensorflow-2021-29516, CVE-2021-29516, GHSA-84mw-34w6-2q43, PYSEC-2021-153, PYSEC-2021-444, PYSEC-2021-642 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in `Conv3D` BIT-tensorflow-2021-29517, CVE-2021-29517, GHSA-772p-x54p-hjrv, PYSEC-2021-154, PYSEC-2021-445, PYSEC-2021-643 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail in SparseCross due to type confusion BIT-tensorflow-2021-29519, CVE-2021-29519, GHSA-772j-h9xw-ffp5, PYSEC-2021-156, PYSEC-2021-447, PYSEC-2021-645 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault in SparseCountSparseOutput BIT-tensorflow-2021-29521, CVE-2021-29521, GHSA-hr84-fqvp-48mm, PYSEC-2021-158, PYSEC-2021-449, PYSEC-2021-647 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |