Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Deserialization of Untrusted Data in parlai CVE-2021-24040, CVE-2021-39207, GHSA-m87f-9fvv-2mgg, GHSA-mwgj-7x7j-6966, PYSEC-2021-330, PYSEC-2021-334 | High | 17.4% | 10 Sep, 2021 | PyPI parlai |
StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) CVE-2021-32839, GHSA-p5w8-wqhj-9hhf, PYSEC-2021-333 | High | 2.3% | 10 Sep, 2021 | PyPI sqlparse |
Infinite Loop in rencode CVE-2021-40839, GHSA-gh8j-2pgf-x458, PYSEC-2021-345 | High | 5.5% | 10 Sep, 2021 | PyPI rencode |
OpenStack Neutron Denial of Service vulnerability CVE-2021-40797, GHSA-cpx3-696p-3cw9, PYSEC-2021-329 | High | 1.8% | 08 Sep, 2021 | PyPI neutron |
Regular Expression Denial of Service in flask-restx CVE-2021-32838, GHSA-3q6g-vf58-7m4g, PYSEC-2021-325 | High | 1.9% | 08 Sep, 2021 | PyPI flask-restx |
Exposure of Resource to Wrong Sphere in salt CVE-2021-21996, GHSA-pf7h-h2wq-m7pg, PYSEC-2021-318 | High | 3.5% | 08 Sep, 2021 | PyPI salt |
Improper Authentication in SaltStack Salt CVE-2021-22004, GHSA-xf37-qcvf-7m57, PYSEC-2021-346 | High | 0.4% | 08 Sep, 2021 | PyPI salt |
Cross-Site Request Forgery in sqlite-web CVE-2021-23404, GHSA-2j58-pwwv-x666, PYSEC-2021-332, SNYK-PYTHON-SQLITEWEB-1316324 | High | 0.5% | 08 Sep, 2021 | PyPI sqlite-web |
Uncontrolled Resource Consumption in pillow BIT-pillow-2021-23437, CVE-2021-23437, GHSA-98vv-pw6r-q6q4, PYSEC-2021-317, SNYK-PYTHON-PILLOW-1319443 | High | 3.2% | 03 Sep, 2021 | PyPI pillow |
OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value CVE-2021-40085, GHSA-fh73-gjvg-349c, PYSEC-2021-361 | High | 1.8% | 31 Aug, 2021 | PyPI neutron |
Code injection in nbgitpuller CVE-2021-39160, GHSA-mq5p-2mcr-m52j, PYSEC-2021-315 | High | 1.7% | 25 Aug, 2021 | PyPI nbgitpuller |
XML External Entity Injection in PyWPS CVE-2021-39371, GHSA-p9wf-3xpg-c9g5, PYSEC-2021-121 | High | 1.5% | 23 Aug, 2021 | PyPI pywps |
OS Command Injection in bikeshed CVE-2021-23422, GHSA-87cj-px37-rc3x, PYSEC-2021-116, SNYK-PYTHON-BIKESHED-1537646 | High | 0.8% | 16 Aug, 2021 | PyPI bikeshed |
Path Traversal in bikshed CVE-2021-23423, GHSA-hf6p-4rv2-9qrp, PYSEC-2021-117, SNYK-PYTHON-BIKESHED-1537647 | High | 1.1% | 16 Aug, 2021 | PyPI bikeshed |
Incomplete validation in `QuantizeV2` BIT-tensorflow-2021-37663, CVE-2021-37663, GHSA-g25h-jr74-qp5j, PYSEC-2021-285, PYSEC-2021-576, PYSEC-2021-774 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in MKL requantization BIT-tensorflow-2021-37665, CVE-2021-37665, GHSA-v82p-hv3v-p6qp, PYSEC-2021-287, PYSEC-2021-578, PYSEC-2021-776 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Arbitrary code execution due to YAML deserialization BIT-tensorflow-2021-37678, CVE-2021-37678, GHSA-r6jx-9g48-2r5r, PYSEC-2021-300, PYSEC-2021-591, PYSEC-2021-789 | High | 0.4% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in nested `tf.map_fn` with `RaggedTensor`s BIT-tensorflow-2021-37679, CVE-2021-37679, GHSA-g8wg-cjwc-xhhp, PYSEC-2021-301, PYSEC-2021-592, PYSEC-2021-790 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Use of unitialized value in TFLite BIT-tensorflow-2021-37682, CVE-2021-37682, GHSA-4c4g-crqm-xrxw, PYSEC-2021-304, PYSEC-2021-595, PYSEC-2021-793 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incorrect validation of `SaveV2` inputs BIT-tensorflow-2021-37648, CVE-2021-37648, GHSA-wp77-4gmm-7cq8, PYSEC-2021-270, PYSEC-2021-561, PYSEC-2021-759 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Use after free in boosted trees creation BIT-tensorflow-2021-37652, CVE-2021-37652, GHSA-m7fm-4jfh-jrg6, PYSEC-2021-274, PYSEC-2021-565, PYSEC-2021-763 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in `RaggedTensorToVariant` BIT-tensorflow-2021-37666, CVE-2021-37666, GHSA-w4xf-2pqw-5mq7, PYSEC-2021-288, PYSEC-2021-579, PYSEC-2021-777 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in unicode encoding BIT-tensorflow-2021-37667, CVE-2021-37667, GHSA-w74j-v8xh-3w5h, PYSEC-2021-289, PYSEC-2021-580, PYSEC-2021-778 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in map operations BIT-tensorflow-2021-37671, CVE-2021-37671, GHSA-qr82-2c78-4m8h, PYSEC-2021-293, PYSEC-2021-584, PYSEC-2021-782 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in shape inference BIT-tensorflow-2021-37676, CVE-2021-37676, GHSA-v768-w7m9-2vmm, PYSEC-2021-298, PYSEC-2021-589, PYSEC-2021-787 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
NPE in TFLite BIT-tensorflow-2021-37681, CVE-2021-37681, GHSA-7xwj-5r4v-429p, PYSEC-2021-303, PYSEC-2021-594, PYSEC-2021-792 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in TFLite BIT-tensorflow-2021-37688, CVE-2021-37688, GHSA-vcjj-9vg7-vf68, PYSEC-2021-310, PYSEC-2021-601, PYSEC-2021-799 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in TFLite MLIR optimizations BIT-tensorflow-2021-37689, CVE-2021-37689, GHSA-wf5p-c75w-w3wh, PYSEC-2021-311, PYSEC-2021-602, PYSEC-2021-800 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap out of bounds access in sparse reduction operations BIT-tensorflow-2021-37635, CVE-2021-37635, GHSA-cgfm-62j4-v4rf, PYSEC-2021-257, PYSEC-2021-548, PYSEC-2021-746 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in `RaggedGather` BIT-tensorflow-2021-37641, CVE-2021-37641, GHSA-9c8h-vvrj-w2p8, PYSEC-2021-263, PYSEC-2021-554, PYSEC-2021-752 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` BIT-tensorflow-2021-37650, CVE-2021-37650, GHSA-f8h4-7rgh-q2gm, PYSEC-2021-272, PYSEC-2021-563, PYSEC-2021-761 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in `FractionalAvgPoolGrad` BIT-tensorflow-2021-37651, CVE-2021-37651, GHSA-hpv4-7p9c-mvfr, PYSEC-2021-273, PYSEC-2021-564, PYSEC-2021-762 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB and CHECK fail in `ResourceGather` BIT-tensorflow-2021-37654, CVE-2021-37654, GHSA-2r8p-fg3c-wcj4, PYSEC-2021-276, PYSEC-2021-567, PYSEC-2021-765 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in `ResourceScatterUpdate` BIT-tensorflow-2021-37655, CVE-2021-37655, GHSA-7fvx-3jfc-2cpc, PYSEC-2021-277, PYSEC-2021-568, PYSEC-2021-766 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in `RaggedTensorToSparse` BIT-tensorflow-2021-37656, CVE-2021-37656, GHSA-4xfp-4pfp-89wg, PYSEC-2021-278, PYSEC-2021-569, PYSEC-2021-767 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in `MatrixDiagV*` ops BIT-tensorflow-2021-37657, CVE-2021-37657, GHSA-5xwc-mrhx-5g3m, PYSEC-2021-279, PYSEC-2021-570, PYSEC-2021-768 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in `MatrixSetDiagV*` ops BIT-tensorflow-2021-37658, CVE-2021-37658, GHSA-6p5r-g9mq-ggh2, PYSEC-2021-280, PYSEC-2021-571, PYSEC-2021-769 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr and heap OOB in binary cwise ops BIT-tensorflow-2021-37659, CVE-2021-37659, GHSA-q3g3-h9r4-prrc, PYSEC-2021-281, PYSEC-2021-572, PYSEC-2021-770 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in boosted trees BIT-tensorflow-2021-37662, CVE-2021-37662, GHSA-f5cx-5wr3-5qrc, PYSEC-2021-284, PYSEC-2021-575, PYSEC-2021-773 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in boosted trees BIT-tensorflow-2021-37664, CVE-2021-37664, GHSA-r4c4-5fpq-56wg, PYSEC-2021-286, PYSEC-2021-577, PYSEC-2021-775 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `CompressElement` BIT-tensorflow-2021-37637, CVE-2021-37637, GHSA-c9qf-r67m-p7cg, PYSEC-2021-259, PYSEC-2021-550, PYSEC-2021-748 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `RaggedTensorToTensor` BIT-tensorflow-2021-37638, CVE-2021-37638, GHSA-hwr7-8gxx-fj5p, PYSEC-2021-260, PYSEC-2021-551, PYSEC-2021-749 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference and heap OOB read in operations restoring tensors BIT-tensorflow-2021-37639, CVE-2021-37639, GHSA-gh6x-4whr-2qv4, PYSEC-2021-261, PYSEC-2021-552, PYSEC-2021-750 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `MatrixDiagPartOp` BIT-tensorflow-2021-37643, CVE-2021-37643, GHSA-fcwc-p4fc-c5cc, PYSEC-2021-265, PYSEC-2021-556, PYSEC-2021-754 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `SparseTensorSliceDataset` BIT-tensorflow-2021-37647, CVE-2021-37647, GHSA-c5x2-p679-95wc, PYSEC-2021-269, PYSEC-2021-560, PYSEC-2021-758 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `UncompressElement` BIT-tensorflow-2021-37649, CVE-2021-37649, GHSA-6gv8-p3vj-pxvr, PYSEC-2021-271, PYSEC-2021-562, PYSEC-2021-760 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Command injection in Yamale CVE-2021-38305, GHSA-435p-f82x-mxwm, PYSEC-2021-119 | High | 2.5% | 09 Aug, 2021 | PyPI yamale |
OpenStack Keystone allows information disclosure during account locking CVE-2021-38155, GHSA-4225-97pr-rr52, PYSEC-2026-830 | High | 2.5% | 06 Aug, 2021 | PyPI keystone |
Storage corruption due to variables overwritten by re-entrancy locks CVE-2021-48018, GHSA-7f92-rr6w-cq64 | High | 0.4% | 05 Aug, 2021 | PyPI vyper |
Remote Code Execution via Script (Python) objects under Python 3 CVE-2021-32811, GHSA-g4gq-j4p2-j8fr, PYSEC-2021-368, PYSEC-2021-370 | High | 2.3% | 02 Aug, 2021 | PyPI Zope PyPI accesscontrol PyPI zope |