Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Crash in NMS ops caused by integer conversion to unsigned BIT-tensorflow-2021-37669, CVE-2021-37669, GHSA-vmjw-c2vp-p33c, PYSEC-2021-291, PYSEC-2021-582, PYSEC-2021-780 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in `UpperBound` and `LowerBound` BIT-tensorflow-2021-37670, CVE-2021-37670, GHSA-9697-98pf-4rw7, PYSEC-2021-292, PYSEC-2021-583, PYSEC-2021-781 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in `SdcaOptimizerV2` BIT-tensorflow-2021-37672, CVE-2021-37672, GHSA-5hj3-vjjf-f5m7, PYSEC-2021-294, PYSEC-2021-585, PYSEC-2021-783 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`CHECK`-fail in `MapStage` BIT-tensorflow-2021-37673, CVE-2021-37673, GHSA-278g-rq84-9hmg, PYSEC-2021-295, PYSEC-2021-586, PYSEC-2021-784 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in `MaxPoolGrad` BIT-tensorflow-2021-37674, CVE-2021-37674, GHSA-7ghq-fvr3-pj2x, PYSEC-2021-296, PYSEC-2021-587, PYSEC-2021-785 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Missing validation in shape inference for `Dequantize` BIT-tensorflow-2021-37677, CVE-2021-37677, GHSA-qfpc-5pjr-mh26, PYSEC-2021-299, PYSEC-2021-590, PYSEC-2021-788 | Medium | 0.1% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
FPE in TFLite division operations BIT-tensorflow-2021-37683, CVE-2021-37683, GHSA-rhrq-64mq-hf9h, PYSEC-2021-305, PYSEC-2021-596, PYSEC-2021-794 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
FPE in TFLite pooling operations BIT-tensorflow-2021-37684, CVE-2021-37684, GHSA-q7f7-544h-67h9, PYSEC-2021-306, PYSEC-2021-597, PYSEC-2021-795 | Medium | 0.1% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in TFLite BIT-tensorflow-2021-37685, CVE-2021-37685, GHSA-c545-c4f9-rf6v, PYSEC-2021-307, PYSEC-2021-598, PYSEC-2021-796 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap OOB in TFLite's `Gather*` implementations BIT-tensorflow-2021-37687, CVE-2021-37687, GHSA-jwf9-w5xm-f437, PYSEC-2021-309, PYSEC-2021-600, PYSEC-2021-798 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
FPE in LSH in TFLite BIT-tensorflow-2021-37691, CVE-2021-37691, GHSA-27qf-jwm8-g7f3, PYSEC-2021-313, PYSEC-2021-604, PYSEC-2021-802 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault on strings tensors with mistmatched dimensions, due to Go code BIT-tensorflow-2021-37692, CVE-2021-37692, GHSA-cmgw-8vpc-rc59, PYSEC-2021-314, PYSEC-2021-605, PYSEC-2021-803 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in most convolution operators BIT-tensorflow-2021-37675, CVE-2021-37675, GHSA-9c8h-2mv3-49ww, PYSEC-2021-297, PYSEC-2021-588, PYSEC-2021-786 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite BIT-tensorflow-2021-37680, CVE-2021-37680, GHSA-cfpj-3q4c-jhvr, PYSEC-2021-302, PYSEC-2021-593, PYSEC-2021-791 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Infinite loop in TFLite BIT-tensorflow-2021-37686, CVE-2021-37686, GHSA-mhhc-q96p-mfm9, PYSEC-2021-308, PYSEC-2021-599, PYSEC-2021-797 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
`std::abort` raised from `TensorListReserve` BIT-tensorflow-2021-37644, CVE-2021-37644, GHSA-27j5-4p9v-pp67, PYSEC-2021-266, PYSEC-2021-557, PYSEC-2021-755 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow due to conversion to unsigned BIT-tensorflow-2021-37645, CVE-2021-37645, GHSA-9w2p-5mgw-p94c, PYSEC-2021-267, PYSEC-2021-558, PYSEC-2021-756 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Bad alloc in `StringNGrams` caused by integer conversion BIT-tensorflow-2021-37646, CVE-2021-37646, GHSA-h6jh-7gv5-28vg, PYSEC-2021-268, PYSEC-2021-559, PYSEC-2021-757 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Crash caused by integer conversion to unsigned BIT-tensorflow-2021-37661, CVE-2021-37661, GHSA-gf88-j2mg-cc82, PYSEC-2021-283, PYSEC-2021-574, PYSEC-2021-772 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Clipboard-based DOM-XSS CVE-2021-37700, GHSA-gpfj-4j6g-c4w9 | Medium | 1.7% | 12 Aug, 2021 | npm @github/paste-markdown |
Exposed phpinfo() leadked via documentation files CVE-2021-37704, GHSA-cvh5-p6r6-g2qc | Medium | 5.9% | 12 Aug, 2021 | Packagist phpfastcache/phpfastcache |
Floating point exception in `SparseDenseCwiseDiv` BIT-tensorflow-2021-37636, CVE-2021-37636, GHSA-hp4c-x6r7-6555, PYSEC-2021-258, PYSEC-2021-549, PYSEC-2021-747 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer division by 0 in sparse reshaping BIT-tensorflow-2021-37640, CVE-2021-37640, GHSA-95xm-g58g-3p88, PYSEC-2021-262, PYSEC-2021-553, PYSEC-2021-751 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `ResourceScatterDiv` BIT-tensorflow-2021-37642, CVE-2021-37642, GHSA-ch4f-829c-v5pw, PYSEC-2021-264, PYSEC-2021-555, PYSEC-2021-753 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `ResourceGather` BIT-tensorflow-2021-37653, CVE-2021-37653, GHSA-qjj8-32p7-h289, PYSEC-2021-275, PYSEC-2021-566, PYSEC-2021-764 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in inplace operations BIT-tensorflow-2021-37660, CVE-2021-37660, GHSA-cm5x-837x-jf3c, PYSEC-2021-282, PYSEC-2021-573, PYSEC-2021-771 | Medium | 0.2% | 12 Aug, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Clipboard feature vulnerability allowing to inject arbitrary HTML into the editor using paste functionality CVE-2021-32809, GHSA-7889-rm5j-hpgg | Medium | 1.2% | 12 Aug, 2021 | npm ckeditor4 |
Cross site scripting via HTML attributes in the back end CVE-2021-35955, GHSA-hr3h-x6gq-rqcp | Medium | 0.6% | 12 Aug, 2021 | Packagist contao/contao Packagist contao/core-bundle |
Open Redirect in Next.js CVE-2021-37699, GHSA-vxf5-wxwp-m7g9 | Medium | 1.0% | 12 Aug, 2021 | npm next |
Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev CVE-2021-3692, GHSA-wwvv-x5mq-h3jj | Medium | 1.7% | 10 Aug, 2021 | Packagist yiisoft/yii2-dev |
Cross-Site Scripting via Rich-Text Content BIT-typo3-2021-32768, CVE-2021-32768, GHSA-c5c9-8c6m-727v | Medium | 0.7% | 10 Aug, 2021 | Packagist typo3/cms Packagist typo3/cms-core |
Workflow re-write vulnerability using input parameter BIT-argo-workflows-2021-37914, CVE-2021-37914, GHSA-h563-xh25-x54q, GO-2022-0928 | Medium | 1.0% | 09 Aug, 2021 | Go github.com/argoproj/argo-workflows Go github.com/argoproj/argo-workflows/v2 Go github.com/argoproj/argo-workflows/v3 |
Improper Access Control in Dolibarr CVE-2021-25954, GHSA-vxhc-c4qm-647p | Medium | 0.7% | 09 Aug, 2021 | Packagist dolibarr/dolibarr |
Subrion Cross-Site Scripting (XSS) vulnerability CVE-2020-22330, GHSA-jj94-j4r3-5gr4 | Medium | 0.6% | 06 Aug, 2021 | Packagist intelliants/subrion |
Cross Site Scripting in Subrion CMS CVE-2020-22392, GHSA-hxj6-v58r-cqv3 | Medium | 0.6% | 05 Aug, 2021 | Packagist intelliants/subrion |
Arbitrary Command Injection due to Improper Command Sanitization GHSA-hxwm-x553-x359 | Medium | Not scored | 05 Aug, 2021 | npm @npmcli/git |
Header dropping in traefik CVE-2021-32813, GHSA-m697-4v8f-55qg, GO-2022-0923 | Medium | 1.1% | 05 Aug, 2021 | Go github.com/traefik/traefik Go github.com/traefik/traefik/v2 |
Use of Cryptographically Weak Pseudo-Random Number Generator in showdoc CVE-2021-3678, GHSA-j85q-whc9-g4p9 | Medium | 1.1% | 04 Aug, 2021 | Packagist showdoc/showdoc |
Inadequate Encryption Strength in showdoc CVE-2021-3680, GHSA-8vh3-29mr-m9xg | Medium | 0.5% | 04 Aug, 2021 | Packagist showdoc/showdoc |
Joplin vulnerable to Cross-site Scripting in notes CVE-2021-37916, GHSA-mrmf-755g-w2vw | Medium | 0.7% | 03 Aug, 2021 | npm joplin |
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability CVE-2021-26085 | MediumExploited | 99.9% | 03 Aug, 2021 | |
Cross-Site Scripting in Qiita-Markdown CVE-2021-28796, GHSA-f2c9-5jqw-3xh3 | Medium | 0.8% | 02 Aug, 2021 | RubyGems qiita-markdown |
qiita-markdown Cross-site Scripting vulnerability CVE-2021-28833, GHSA-9p29-94hp-8rvc | Medium | 0.7% | 02 Aug, 2021 | RubyGems qiita-markdown |
Attack on Kubernetes via Misconfigured Argo Workflows GHSA-rc7p-gmvh-xfx2 | Medium | Not scored | 02 Aug, 2021 | Go github.com/argoproj/argo-workflows |
Directory Traversal in isomorphic-git CVE-2021-30483, GHSA-fgxq-p49f-qw99 | Medium | 2.2% | 30 Jul, 2021 | npm isomorphic-git |
NukeViet Cross-site Scripting via the editor in the News module CVE-2020-22765, GHSA-6j4j-22qg-9ffm | Medium | 0.6% | 30 Jul, 2021 | Packagist nukeviet/nukeviet |
Incorrect Authorization in HashiCorp Consul BIT-consul-2020-7955, CVE-2020-7955, GHSA-r9w6-rhh9-7v53, GO-2022-0874 | Medium | 1.4% | 28 Jul, 2021 | Go github.com/hashicorp/consul |
Cross-site Scripting in curly-bracket-parser CVE-2021-23416, GHSA-rqf8-8c89-mw29 | Medium | 0.8% | 28 Jul, 2021 | npm curly-bracket-parser |
Cross-site Scripting in video.js CVE-2021-23414, GHSA-pp7m-6j83-m7r6 | Medium | 2.5% | 28 Jul, 2021 | npm video.js |
Misinterpretation of malicious XML input CVE-2021-32796, GHSA-5fg8-2547-mr8q | Medium | 1.4% | 27 Jul, 2021 | npm @xmldom/xmldom npm xmldom |