Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Heap buffer overflow in `MaxPoolGrad` BIT-tensorflow-2021-29579, CVE-2021-29579, GHSA-79fv-9865-4qcv, PYSEC-2021-216, PYSEC-2021-507, PYSEC-2021-705 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB read in `tf.raw_ops.Dequantize` BIT-tensorflow-2021-29582, CVE-2021-29582, GHSA-c45w-2wxr-pp53, PYSEC-2021-219, PYSEC-2021-510, PYSEC-2021-708 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow and undefined behavior in `FusedBatchNorm` BIT-tensorflow-2021-29583, CVE-2021-29583, GHSA-9xh4-23q4-v6wr, PYSEC-2021-220, PYSEC-2021-511, PYSEC-2021-709 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in padding computation in TFLite BIT-tensorflow-2021-29585, CVE-2021-29585, GHSA-mv78-g7wq-mhp4, PYSEC-2021-222, PYSEC-2021-513, PYSEC-2021-711 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in optimized pooling implementations in TFLite BIT-tensorflow-2021-29586, CVE-2021-29586, GHSA-26j7-6w8w-7922, PYSEC-2021-223, PYSEC-2021-514, PYSEC-2021-712 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `SpaceToDepth` BIT-tensorflow-2021-29587, CVE-2021-29587, GHSA-j7rm-8ww4-xx2g, PYSEC-2021-224, PYSEC-2021-515, PYSEC-2021-713 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `TransposeConv` BIT-tensorflow-2021-29588, CVE-2021-29588, GHSA-vfr4-x8j2-3rf9, PYSEC-2021-225, PYSEC-2021-516, PYSEC-2021-714 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `GatherNd` BIT-tensorflow-2021-29589, CVE-2021-29589, GHSA-3w67-q784-6w7c, PYSEC-2021-226, PYSEC-2021-517, PYSEC-2021-715 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB read in TFLite's implementation of `Minimum` or `Maximum` BIT-tensorflow-2021-29590, CVE-2021-29590, GHSA-24x6-8c7m-hv3f, PYSEC-2021-227, PYSEC-2021-518, PYSEC-2021-716 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Stack overflow due to looping TFLite subgraph BIT-tensorflow-2021-29591, CVE-2021-29591, GHSA-cwv3-863g-39vx, PYSEC-2021-228, PYSEC-2021-519, PYSEC-2021-717 | High | 0.3% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in TFLite's `Reshape` operator BIT-tensorflow-2021-29592, CVE-2021-29592, GHSA-jjr8-m8g8-p6wv, PYSEC-2021-229, PYSEC-2021-520, PYSEC-2021-718 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `BatchToSpaceNd` BIT-tensorflow-2021-29593, CVE-2021-29593, GHSA-cfx7-2xpc-8w4h, PYSEC-2021-230, PYSEC-2021-521, PYSEC-2021-719 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's convolution code BIT-tensorflow-2021-29594, CVE-2021-29594, GHSA-3qgw-p4fm-x7gf, PYSEC-2021-231, PYSEC-2021-522, PYSEC-2021-720 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `DepthToSpace` BIT-tensorflow-2021-29595, CVE-2021-29595, GHSA-vf94-36g5-69v8, PYSEC-2021-232, PYSEC-2021-523, PYSEC-2021-721 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `EmbeddingLookup` BIT-tensorflow-2021-29596, CVE-2021-29596, GHSA-4vrf-ff7v-hpgr, PYSEC-2021-233, PYSEC-2021-524, PYSEC-2021-722 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `SpaceToBatchNd` BIT-tensorflow-2021-29597, CVE-2021-29597, GHSA-v52p-hfjf-wg88, PYSEC-2021-234, PYSEC-2021-525, PYSEC-2021-723 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `SVDF` BIT-tensorflow-2021-29598, CVE-2021-29598, GHSA-pmpr-55fj-r229, PYSEC-2021-235, PYSEC-2021-526, PYSEC-2021-724 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of Split BIT-tensorflow-2021-29599, CVE-2021-29599, GHSA-97wf-p777-86jq, PYSEC-2021-236, PYSEC-2021-527, PYSEC-2021-725 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `OneHot` BIT-tensorflow-2021-29600, CVE-2021-29600, GHSA-j8qh-3xrq-c825, PYSEC-2021-237, PYSEC-2021-528, PYSEC-2021-726 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow in TFLite concatentation BIT-tensorflow-2021-29601, CVE-2021-29601, GHSA-9c84-4hx6-xmm4, PYSEC-2021-238, PYSEC-2021-529, PYSEC-2021-727 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB write in TFLite BIT-tensorflow-2021-29603, CVE-2021-29603, GHSA-crch-j389-5f84, PYSEC-2021-240, PYSEC-2021-531, PYSEC-2021-729 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB read in TFLite BIT-tensorflow-2021-29606, CVE-2021-29606, GHSA-h4pc-gx2w-f2xv, PYSEC-2021-243, PYSEC-2021-534, PYSEC-2021-732 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in `SparseSparseMinimum` BIT-tensorflow-2021-29607, CVE-2021-29607, GHSA-gv26-jpj9-c8gq, PYSEC-2021-244, PYSEC-2021-535, PYSEC-2021-733 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB and null pointer dereference in `RaggedTensorToTensor` BIT-tensorflow-2021-29608, CVE-2021-29608, GHSA-rgvq-pcvf-hx75, PYSEC-2021-245, PYSEC-2021-536, PYSEC-2021-734 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in `SparseAdd` BIT-tensorflow-2021-29609, CVE-2021-29609, GHSA-cjc7-49v2-jp64, PYSEC-2021-246, PYSEC-2021-537, PYSEC-2021-735 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Invalid validation in `QuantizeAndDequantizeV2` BIT-tensorflow-2021-29610, CVE-2021-29610, GHSA-mq5c-prh3-3f3h, PYSEC-2021-247, PYSEC-2021-538, PYSEC-2021-736 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in `BandedTriangularSolve` BIT-tensorflow-2021-29612, CVE-2021-29612, GHSA-2xgj-xhgf-ggjv, PYSEC-2021-249, PYSEC-2021-540, PYSEC-2021-738 | High | 0.3% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in `tf.raw_ops.CTCLoss` BIT-tensorflow-2021-29613, CVE-2021-29613, GHSA-vvg4-vgrv-xfr7, PYSEC-2021-250, PYSEC-2021-541, PYSEC-2021-739 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Interpreter crash from `tf.io.decode_raw` BIT-tensorflow-2021-29614, CVE-2021-29614, GHSA-8pmx-p244-g88h, PYSEC-2021-251, PYSEC-2021-542, PYSEC-2021-740 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null dereference in Grappler's `TrySimplify` BIT-tensorflow-2021-29616, CVE-2021-29616, GHSA-4hvv-7x94-7vq8, PYSEC-2021-253, PYSEC-2021-544, PYSEC-2021-742 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in `RaggedBinCount` BIT-tensorflow-2021-29512, CVE-2021-29512, GHSA-4278-2v5v-65r4, PYSEC-2021-149, PYSEC-2021-440, PYSEC-2021-638 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic CVE-2021-29510, GHSA-5jqp-qgf6-3pvh, PYSEC-2021-47 | High | 1.0% | 13 May, 2021 | PyPI pydantic |
OctoPrint Incorrect Access Control CVE-2021-32560, GHSA-x9rq-fjp5-qgm9, PYSEC-2021-29 | High | 1.5% | 11 May, 2021 | PyPI octoprint |
Unauthorized access through URL manipulation GHSA-qrmm-w4v4-q7f8 | High | Not scored | 06 May, 2021 | PyPI docassemble |
Path Traversal in Django BIT-django-2021-31542, CVE-2021-31542, GHSA-rxjp-mfm9-w4wr, PYSEC-2021-7 | High | 5.3% | 05 May, 2021 | PyPI Django PyPI django |
Ansible Exposes Sensitive Information CVE-2021-20228, GHSA-5rrg-rr89-x9mv, PYSEC-2021-1 | High | 2.1% | 29 Apr, 2021 | PyPI ansible |
Command Injection in SaltStack Salt CVE-2021-31607, GHSA-hcjf-rp5h-g5h3, PYSEC-2021-56 | High | 5.9% | 23 Apr, 2021 | PyPI salt |
Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields CVE-2021-29434, GHSA-wq5h-f9p5-q7fx, PYSEC-2021-114 | High | 0.6% | 19 Apr, 2021 | PyPI wagtail |
VVE-2021-0001: Memory corruption using function calls within arrays CVE-2021-48020, GHSA-22wc-c9wj-6q2v | High | 0.3% | 19 Apr, 2021 | PyPI vyper |
Sydent vulnerable to denial of service attack via memory exhaustion CVE-2021-29430, GHSA-wmg4-8cp2-hpg9, PYSEC-2021-21 | High | 1.8% | 15 Apr, 2021 | PyPI matrix-sydent |
Open redirect via transitional IPv6 addresses on dual-stack networks CVE-2021-21392, GHSA-5wrh-4jwv-5w78, PYSEC-2021-25 | High | 0.9% | 12 Apr, 2021 | PyPI matrix-synapse |
Improper Input Validation in sopel-plugins.channelmgnt CVE-2021-21431, GHSA-23c7-6444-399m, PYSEC-2021-58 | High | 1.1% | 09 Apr, 2021 | PyPI sopel-plugins-channelmgnt PyPI sopel-plugins.channelmgnt |
Indico Tampering with links (e.g. password reset) in sent emails CVE-2021-30185, GHSA-wgpj-7c2j-vfjm, PYSEC-2021-18 | High | 1.0% | 07 Apr, 2021 | PyPI indico |
Rebuild-bot workflow may allow unauthorised repository modifications CVE-2021-21423, GHSA-gg2g-m5wc-vccq, PYSEC-2021-111 | High | 1.4% | 06 Apr, 2021 | PyPI projen npm projen |
Improper Restriction of XML External Entity Reference in pikepdf CVE-2021-29421, GHSA-ccgm-3xw4-h5p8, PYSEC-2021-34 | High | 1.7% | 01 Apr, 2021 | PyPI pikepdf |
Cross-site scripting (XSS) vulnerability in the password reset endpoint CVE-2021-21332, GHSA-246w-56m2-5899, PYSEC-2021-133 | High | 1.2% | 26 Mar, 2021 | PyPI matrix-synapse |
nanopb vulnerable to invalid free() call with oneofs and PB_ENABLE_MALLOC CVE-2021-21401, GHSA-7mv5-5mxh-qg88, PYSEC-2021-432 | High | 1.8% | 23 Mar, 2021 | PyPI nanopb |
Infinite Loop in Pygments CVE-2021-20270, GHSA-9w8r-397f-prfh, PYSEC-2021-140 | High | 2.8% | 23 Mar, 2021 | PyPI Pygments PyPI pygments |
OMERO.web exposes some unnecessary session information in the page CVE-2021-21376, GHSA-gfp2-w5jm-955q, PYSEC-2021-31 | High | 1.5% | 23 Mar, 2021 | PyPI omero-web |
Out-of-bounds Write in Pillow BIT-pillow-2021-25290, CVE-2021-25290, GHSA-8xjq-8fcg-g5hw, PYSEC-2021-36 | High | 2.4% | 19 Mar, 2021 | PyPI pillow |