Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Division by zero in TFLite's convolution code BIT-tensorflow-2021-29594, CVE-2021-29594, GHSA-3qgw-p4fm-x7gf, PYSEC-2021-231, PYSEC-2021-522, PYSEC-2021-720 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `DepthToSpace` BIT-tensorflow-2021-29595, CVE-2021-29595, GHSA-vf94-36g5-69v8, PYSEC-2021-232, PYSEC-2021-523, PYSEC-2021-721 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `EmbeddingLookup` BIT-tensorflow-2021-29596, CVE-2021-29596, GHSA-4vrf-ff7v-hpgr, PYSEC-2021-233, PYSEC-2021-524, PYSEC-2021-722 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `SpaceToBatchNd` BIT-tensorflow-2021-29597, CVE-2021-29597, GHSA-v52p-hfjf-wg88, PYSEC-2021-234, PYSEC-2021-525, PYSEC-2021-723 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `SVDF` BIT-tensorflow-2021-29598, CVE-2021-29598, GHSA-pmpr-55fj-r229, PYSEC-2021-235, PYSEC-2021-526, PYSEC-2021-724 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of Split BIT-tensorflow-2021-29599, CVE-2021-29599, GHSA-97wf-p777-86jq, PYSEC-2021-236, PYSEC-2021-527, PYSEC-2021-725 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `OneHot` BIT-tensorflow-2021-29600, CVE-2021-29600, GHSA-j8qh-3xrq-c825, PYSEC-2021-237, PYSEC-2021-528, PYSEC-2021-726 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow in TFLite concatentation BIT-tensorflow-2021-29601, CVE-2021-29601, GHSA-9c84-4hx6-xmm4, PYSEC-2021-238, PYSEC-2021-529, PYSEC-2021-727 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB write in TFLite BIT-tensorflow-2021-29603, CVE-2021-29603, GHSA-crch-j389-5f84, PYSEC-2021-240, PYSEC-2021-531, PYSEC-2021-729 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB read in TFLite BIT-tensorflow-2021-29606, CVE-2021-29606, GHSA-h4pc-gx2w-f2xv, PYSEC-2021-243, PYSEC-2021-534, PYSEC-2021-732 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in `SparseSparseMinimum` BIT-tensorflow-2021-29607, CVE-2021-29607, GHSA-gv26-jpj9-c8gq, PYSEC-2021-244, PYSEC-2021-535, PYSEC-2021-733 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB and null pointer dereference in `RaggedTensorToTensor` BIT-tensorflow-2021-29608, CVE-2021-29608, GHSA-rgvq-pcvf-hx75, PYSEC-2021-245, PYSEC-2021-536, PYSEC-2021-734 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in `SparseAdd` BIT-tensorflow-2021-29609, CVE-2021-29609, GHSA-cjc7-49v2-jp64, PYSEC-2021-246, PYSEC-2021-537, PYSEC-2021-735 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Invalid validation in `QuantizeAndDequantizeV2` BIT-tensorflow-2021-29610, CVE-2021-29610, GHSA-mq5c-prh3-3f3h, PYSEC-2021-247, PYSEC-2021-538, PYSEC-2021-736 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in `BandedTriangularSolve` BIT-tensorflow-2021-29612, CVE-2021-29612, GHSA-2xgj-xhgf-ggjv, PYSEC-2021-249, PYSEC-2021-540, PYSEC-2021-738 | High | 0.3% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in `tf.raw_ops.CTCLoss` BIT-tensorflow-2021-29613, CVE-2021-29613, GHSA-vvg4-vgrv-xfr7, PYSEC-2021-250, PYSEC-2021-541, PYSEC-2021-739 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Interpreter crash from `tf.io.decode_raw` BIT-tensorflow-2021-29614, CVE-2021-29614, GHSA-8pmx-p244-g88h, PYSEC-2021-251, PYSEC-2021-542, PYSEC-2021-740 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null dereference in Grappler's `TrySimplify` BIT-tensorflow-2021-29616, CVE-2021-29616, GHSA-4hvv-7x94-7vq8, PYSEC-2021-253, PYSEC-2021-544, PYSEC-2021-742 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Insecure template handling in Express-handlebars BIT-handlebars-2021-32820, CVE-2021-32820, GHSA-fr76-2wp8-fp92 | High | 15.7% | 14 May, 2021 | npm express-handlebars |
Insecure template handling in Squirrelly CVE-2021-32819, GHSA-q8j6-pwqx-pm96 | High | 58.3% | 14 May, 2021 | npm squirrelly |
Insecure template handling in haml-coffee CVE-2021-32818, GHSA-m7mf-vm62-7x3q | High | 0.7% | 14 May, 2021 | npm haml-coffee |
Heap buffer overflow in `RaggedBinCount` BIT-tensorflow-2021-29512, CVE-2021-29512, GHSA-4278-2v5v-65r4, PYSEC-2021-149, PYSEC-2021-440, PYSEC-2021-638 | High | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic CVE-2021-29510, GHSA-5jqp-qgf6-3pvh, PYSEC-2021-47 | High | 1.0% | 13 May, 2021 | PyPI pydantic |
Puma's Keepalive Connections Causing Denial Of Service CVE-2021-29509, GHSA-q28m-8xjw-8vr5 | High | 1.6% | 11 May, 2021 | RubyGems puma |
OctoPrint Incorrect Access Control CVE-2021-32560, GHSA-x9rq-fjp5-qgm9, PYSEC-2021-29 | High | 1.5% | 11 May, 2021 | PyPI octoprint |
Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability CVE-2021-28664 | HighExploited | 5.5% | 10 May, 2021 | |
Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability CVE-2021-28663 | HighExploited | 12.1% | 10 May, 2021 | |
Predictable SIF UUID Identifiers in github.com/sylabs/sif CVE-2021-29499, GHSA-4gh8-x3vv-phhg, GO-2022-0912 | High | 1.0% | 07 May, 2021 | Go github.com/sylabs/sif |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability CVE-2021-1905 | HighExploited | 1.5% | 07 May, 2021 | |
Cross-Site Request Forgery in forkcms CVE-2020-23264, GHSA-82xf-8h9p-c6qj | High | 0.6% | 06 May, 2021 | Packagist forkcms/forkcms |
Unauthorized access through URL manipulation GHSA-qrmm-w4v4-q7f8 | High | Not scored | 06 May, 2021 | PyPI docassemble |
Tempfile on Windows path traversal vulnerability BIT-ruby-2021-28966, BIT-ruby-min-2021-28966, CVE-2021-28966, GHSA-46f2-3v63-3xrp | High | 58.0% | 06 May, 2021 | RubyGems tmpdir |
Weak Password Recovery Mechanism for Forgotten Password in Strapi CVE-2021-28128, GHSA-37hx-4mcq-wc3h | High | 1.3% | 06 May, 2021 | npm strapi |
Command injection in git-parse CVE-2021-26543, GHSA-m744-2jj8-vpfv | High | 2.5% | 06 May, 2021 | npm git-parse |
Possible DoS Vulnerability in Action Controller Token Authentication CVE-2021-22904, GHSA-7wjx-3g7j-8584 | High | 4.9% | 05 May, 2021 | RubyGems actionpack |
Action Pack contains Information Disclosure / Unintended Method Execution vulnerability CVE-2021-22885, GHSA-hjg4-8q5f-x6fm | High | 4.0% | 05 May, 2021 | RubyGems actionpack |
Denial of Service in Action Dispatch CVE-2021-22902, GHSA-g8ww-46x2-2p65 | High | 2.9% | 05 May, 2021 | RubyGems actionpack |
Options structure open to Cross-site Scripting if passed unfiltered CVE-2021-29489, GHSA-8j65-4pcq-xq95 | High | 0.9% | 05 May, 2021 | npm highcharts |
Path Traversal in Django BIT-django-2021-31542, CVE-2021-31542, GHSA-rxjp-mfm9-w4wr, PYSEC-2021-7 | High | 5.3% | 05 May, 2021 | PyPI Django PyPI django |
Arbitrary code execution in ExifTool GHSA-4whq-r978-2x68 | High | Not scored | 04 May, 2021 | npm exiftool-vendored |
Dell dbutil Driver Insufficient Access Control Vulnerability CVE-2021-21551 | HighExploited | 79.6% | 04 May, 2021 | |
Regular Expression Denial of Service in path-parse CVE-2021-23343, GHSA-hj48-42vr-x3v9 | High | 2.2% | 04 May, 2021 | npm path-parse |
cumulative-distribution-function Infinite Loop vulnerability CVE-2021-29486, GHSA-58qp-5328-v7mh | High | 2.0% | 30 Apr, 2021 | npm cumulative-distribution-function |
SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database GHSA-4mg9-vhxq-vm7j | High | Not scored | 29 Apr, 2021 | Packagist illuminate/database Packagist laravel/framework |
Ansible Exposes Sensitive Information CVE-2021-20228, GHSA-5rrg-rr89-x9mv, PYSEC-2021-1 | High | 2.0% | 29 Apr, 2021 | PyPI ansible |
Dependency Confusion in Bundler CVE-2020-36327, GHSA-fp4w-jxhp-m23p | High | 6.3% | 29 Apr, 2021 | RubyGems bundler |
SQL Injection in t3/dce CVE-2021-31777, GHSA-5v5h-4w2g-gxxc | High | 1.4% | 28 Apr, 2021 | Packagist t3/dce |
Composer's missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial BIT-composer-2021-29472, CVE-2021-29472, GHSA-h5h8-pc6h-jvvx | High | 4.8% | 27 Apr, 2021 | Packagist composer/composer |
Cross-site scripting (XSS) from unsanitized uploaded SVG files in Kirby CVE-2021-29460, GHSA-qgp4-5qx6-548g | High | 3.2% | 27 Apr, 2021 | Packagist getkirby/cms |
Pgsync Contains Cleartext Transmission of Sensitive Information CVE-2021-31671, GHSA-72rj-36qc-47g7 | High | 0.7% | 27 Apr, 2021 | RubyGems pgsync |