Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Arbitrary code execution due to YAML deserialization BIT-tensorflow-2021-37678, CVE-2021-37678, GHSA-r6jx-9g48-2r5r, PYSEC-2021-300, PYSEC-2021-591, PYSEC-2021-789 | High | 0.4% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in nested `tf.map_fn` with `RaggedTensor`s BIT-tensorflow-2021-37679, CVE-2021-37679, GHSA-g8wg-cjwc-xhhp, PYSEC-2021-301, PYSEC-2021-592, PYSEC-2021-790 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Use of unitialized value in TFLite BIT-tensorflow-2021-37682, CVE-2021-37682, GHSA-4c4g-crqm-xrxw, PYSEC-2021-304, PYSEC-2021-595, PYSEC-2021-793 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Cross-Site Request Forgery in express-cart CVE-2020-22403, GHSA-h5q8-5697-9p9h | High | 0.6% | 12 Aug, 2021 | npm express-cart |
Incorrect validation of `SaveV2` inputs BIT-tensorflow-2021-37648, CVE-2021-37648, GHSA-wp77-4gmm-7cq8, PYSEC-2021-270, PYSEC-2021-561, PYSEC-2021-759 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Use after free in boosted trees creation BIT-tensorflow-2021-37652, CVE-2021-37652, GHSA-m7fm-4jfh-jrg6, PYSEC-2021-274, PYSEC-2021-565, PYSEC-2021-763 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in `RaggedTensorToVariant` BIT-tensorflow-2021-37666, CVE-2021-37666, GHSA-w4xf-2pqw-5mq7, PYSEC-2021-288, PYSEC-2021-579, PYSEC-2021-777 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in unicode encoding BIT-tensorflow-2021-37667, CVE-2021-37667, GHSA-w74j-v8xh-3w5h, PYSEC-2021-289, PYSEC-2021-580, PYSEC-2021-778 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in map operations BIT-tensorflow-2021-37671, CVE-2021-37671, GHSA-qr82-2c78-4m8h, PYSEC-2021-293, PYSEC-2021-584, PYSEC-2021-782 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in shape inference BIT-tensorflow-2021-37676, CVE-2021-37676, GHSA-v768-w7m9-2vmm, PYSEC-2021-298, PYSEC-2021-589, PYSEC-2021-787 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
NPE in TFLite BIT-tensorflow-2021-37681, CVE-2021-37681, GHSA-7xwj-5r4v-429p, PYSEC-2021-303, PYSEC-2021-594, PYSEC-2021-792 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in TFLite BIT-tensorflow-2021-37688, CVE-2021-37688, GHSA-vcjj-9vg7-vf68, PYSEC-2021-310, PYSEC-2021-601, PYSEC-2021-799 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in TFLite MLIR optimizations BIT-tensorflow-2021-37689, CVE-2021-37689, GHSA-wf5p-c75w-w3wh, PYSEC-2021-311, PYSEC-2021-602, PYSEC-2021-800 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap out of bounds access in sparse reduction operations BIT-tensorflow-2021-37635, CVE-2021-37635, GHSA-cgfm-62j4-v4rf, PYSEC-2021-257, PYSEC-2021-548, PYSEC-2021-746 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in `RaggedGather` BIT-tensorflow-2021-37641, CVE-2021-37641, GHSA-9c8h-vvrj-w2p8, PYSEC-2021-263, PYSEC-2021-554, PYSEC-2021-752 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` BIT-tensorflow-2021-37650, CVE-2021-37650, GHSA-f8h4-7rgh-q2gm, PYSEC-2021-272, PYSEC-2021-563, PYSEC-2021-761 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in `FractionalAvgPoolGrad` BIT-tensorflow-2021-37651, CVE-2021-37651, GHSA-hpv4-7p9c-mvfr, PYSEC-2021-273, PYSEC-2021-564, PYSEC-2021-762 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB and CHECK fail in `ResourceGather` BIT-tensorflow-2021-37654, CVE-2021-37654, GHSA-2r8p-fg3c-wcj4, PYSEC-2021-276, PYSEC-2021-567, PYSEC-2021-765 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in `ResourceScatterUpdate` BIT-tensorflow-2021-37655, CVE-2021-37655, GHSA-7fvx-3jfc-2cpc, PYSEC-2021-277, PYSEC-2021-568, PYSEC-2021-766 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in `RaggedTensorToSparse` BIT-tensorflow-2021-37656, CVE-2021-37656, GHSA-4xfp-4pfp-89wg, PYSEC-2021-278, PYSEC-2021-569, PYSEC-2021-767 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in `MatrixDiagV*` ops BIT-tensorflow-2021-37657, CVE-2021-37657, GHSA-5xwc-mrhx-5g3m, PYSEC-2021-279, PYSEC-2021-570, PYSEC-2021-768 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in `MatrixSetDiagV*` ops BIT-tensorflow-2021-37658, CVE-2021-37658, GHSA-6p5r-g9mq-ggh2, PYSEC-2021-280, PYSEC-2021-571, PYSEC-2021-769 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr and heap OOB in binary cwise ops BIT-tensorflow-2021-37659, CVE-2021-37659, GHSA-q3g3-h9r4-prrc, PYSEC-2021-281, PYSEC-2021-572, PYSEC-2021-770 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in boosted trees BIT-tensorflow-2021-37662, CVE-2021-37662, GHSA-f5cx-5wr3-5qrc, PYSEC-2021-284, PYSEC-2021-575, PYSEC-2021-773 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in boosted trees BIT-tensorflow-2021-37664, CVE-2021-37664, GHSA-r4c4-5fpq-56wg, PYSEC-2021-286, PYSEC-2021-577, PYSEC-2021-775 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `CompressElement` BIT-tensorflow-2021-37637, CVE-2021-37637, GHSA-c9qf-r67m-p7cg, PYSEC-2021-259, PYSEC-2021-550, PYSEC-2021-748 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `RaggedTensorToTensor` BIT-tensorflow-2021-37638, CVE-2021-37638, GHSA-hwr7-8gxx-fj5p, PYSEC-2021-260, PYSEC-2021-551, PYSEC-2021-749 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference and heap OOB read in operations restoring tensors BIT-tensorflow-2021-37639, CVE-2021-37639, GHSA-gh6x-4whr-2qv4, PYSEC-2021-261, PYSEC-2021-552, PYSEC-2021-750 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `MatrixDiagPartOp` BIT-tensorflow-2021-37643, CVE-2021-37643, GHSA-fcwc-p4fc-c5cc, PYSEC-2021-265, PYSEC-2021-556, PYSEC-2021-754 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `SparseTensorSliceDataset` BIT-tensorflow-2021-37647, CVE-2021-37647, GHSA-c5x2-p679-95wc, PYSEC-2021-269, PYSEC-2021-560, PYSEC-2021-758 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `UncompressElement` BIT-tensorflow-2021-37649, CVE-2021-37649, GHSA-6gv8-p3vj-pxvr, PYSEC-2021-271, PYSEC-2021-562, PYSEC-2021-760 | High | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Microsoft Windows Update Medic Service Privilege Escalation Vulnerability CVE-2021-36948 | HighExploited | 23.3% | 12 Aug, 2021 | |
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability CVE-2021-36942 | HighExploited | 66.0% | 12 Aug, 2021 | |
Microsoft Windows Event Tracing Privilege Escalation Vulnerability CVE-2021-34486 | HighExploited | 9.3% | 12 Aug, 2021 | |
Microsoft Windows User Profile Service Privilege Escalation Vulnerability CVE-2021-34484 | HighExploited | 21.8% | 12 Aug, 2021 | |
Widget feature vulnerability allowing to execute JavaScript code using undo functionality CVE-2021-32808, GHSA-6226-h7ff-ch6c | High | 1.2% | 12 Aug, 2021 | npm ckeditor4 |
Improper use of cryptographic key in wal-g CVE-2021-38599, GHSA-vrmr-f2qh-3hhf | High | 0.8% | 12 Aug, 2021 | Go github.com/wal-g/wal-g |
Privilege escalation via form generator CVE-2021-37627, GHSA-hq5m-mqmx-fw6m | High | 1.0% | 11 Aug, 2021 | Packagist contao/contao Packagist contao/core-bundle |
PHP file inclusion via insert tags CVE-2021-37626, GHSA-r6mv-ppjc-4hgr | High | 1.3% | 11 Aug, 2021 | Packagist contao/contao Packagist contao/core-bundle |
Code injection issue for java-spring-cloud-stream-template CVE-2021-37694, GHSA-xj6r-2jpm-qvxp | High | 0.9% | 11 Aug, 2021 | npm @asyncapi/java-spring-cloud-stream-template |
Use of Insufficiently Random Values in yiisoft/yii2-dev CVE-2021-3689, GHSA-hq3v-rg6f-6hx4 | High | 1.9% | 10 Aug, 2021 | Packagist yiisoft/yii2-dev |
Path traversal in ServiceCenter CVE-2021-21501, GHSA-x6jv-5vfg-gm7x | High | 4.4% | 10 Aug, 2021 | Go github.com/apache/servicecomb-service-center |
Command injection in Yamale CVE-2021-38305, GHSA-435p-f82x-mxwm, PYSEC-2021-119 | High | 2.5% | 09 Aug, 2021 | PyPI yamale |
OpenStack Keystone allows information disclosure during account locking CVE-2021-38155, GHSA-4225-97pr-rr52, PYSEC-2026-830 | High | 2.5% | 06 Aug, 2021 | PyPI keystone |
Storage corruption due to variables overwritten by re-entrancy locks CVE-2021-48018, GHSA-7f92-rr6w-cq64 | High | 0.4% | 05 Aug, 2021 | PyPI vyper |
Malicious password-reset in Akaunting CVE-2021-36804, GHSA-246r-r2wf-frhx | High | 1.0% | 04 Aug, 2021 | Packagist akaunting/akaunting |
Header dropping in traefik CVE-2021-32813, GHSA-m697-4v8f-55qg, GO-2022-0923 | High | 1.1% | 03 Aug, 2021 | Go github.com/traefik/traefik Go github.com/traefik/traefik/v2 |
Google Chromium V8 Type Confusion Vulnerability CVE-2021-30563 | HighExploited | 9.0% | 03 Aug, 2021 | |
Nokogiri has vulnerable dependencies on libxml2 and libxslt CVE-2021-30560, GHSA-59gp-qqm7-cw4j | High | 20.4% | 03 Aug, 2021 | RubyGems nokogiri |
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization CVE-2021-32804, GHSA-3jfq-g458-7qm9 | High | 15.1% | 03 Aug, 2021 | npm tar |