Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
CHECK-fail in `CTCGreedyDecoder` BIT-tensorflow-2021-29543, CVE-2021-29543, GHSA-fphq-gw9m-ghrv, PYSEC-2021-180, PYSEC-2021-471, PYSEC-2021-669 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail in `QuantizeAndDequantizeV4Grad` BIT-tensorflow-2021-29544, CVE-2021-29544, GHSA-6g85-3hm8-83f9, PYSEC-2021-181, PYSEC-2021-472, PYSEC-2021-670 | Medium | 0.3% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap buffer overflow in `SparseTensorToCSRSparseMatrix` BIT-tensorflow-2021-29545, CVE-2021-29545, GHSA-hmg3-c7xj-6qwm, PYSEC-2021-182, PYSEC-2021-473, PYSEC-2021-671 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization` BIT-tensorflow-2021-29547, CVE-2021-29547, GHSA-4fg4-p75j-w5xj, PYSEC-2021-184, PYSEC-2021-475, PYSEC-2021-673 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `QuantizedBatchNormWithGlobalNormalization` BIT-tensorflow-2021-29548, CVE-2021-29548, GHSA-p45v-v4pw-77jr, PYSEC-2021-185, PYSEC-2021-476, PYSEC-2021-674 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `QuantizedAdd` BIT-tensorflow-2021-29549, CVE-2021-29549, GHSA-x83m-p7pv-ch8v, PYSEC-2021-186, PYSEC-2021-477, PYSEC-2021-675 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `FractionalAvgPool` BIT-tensorflow-2021-29550, CVE-2021-29550, GHSA-f78g-q7r4-9wcv, PYSEC-2021-187, PYSEC-2021-478, PYSEC-2021-676 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
OOB read in `MatrixTriangularSolve` BIT-tensorflow-2021-29551, CVE-2021-29551, GHSA-vqw6-72r7-fgw7, PYSEC-2021-188, PYSEC-2021-479, PYSEC-2021-677 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-failure in `UnsortedSegmentJoin` BIT-tensorflow-2021-29552, CVE-2021-29552, GHSA-jhq9-wm9m-cf89, PYSEC-2021-189, PYSEC-2021-480, PYSEC-2021-678 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `FusedBatchNorm` BIT-tensorflow-2021-29555, CVE-2021-29555, GHSA-r35g-4525-29fq, PYSEC-2021-192, PYSEC-2021-483, PYSEC-2021-681 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `Reverse` BIT-tensorflow-2021-29556, CVE-2021-29556, GHSA-fxqh-cfjm-fp93, PYSEC-2021-193, PYSEC-2021-484, PYSEC-2021-682 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `SparseMatMul` BIT-tensorflow-2021-29557, CVE-2021-29557, GHSA-xw93-v57j-fcgh, PYSEC-2021-194, PYSEC-2021-485, PYSEC-2021-683 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail in `LoadAndRemapMatrix` BIT-tensorflow-2021-29561, CVE-2021-29561, GHSA-gvm4-h8j3-rjrq, PYSEC-2021-198, PYSEC-2021-489, PYSEC-2021-687 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail in `tf.raw_ops.IRFFT` BIT-tensorflow-2021-29562, CVE-2021-29562, GHSA-36vm-xw34-x4pj, PYSEC-2021-199, PYSEC-2021-490, PYSEC-2021-688 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail in `tf.raw_ops.RFFT` BIT-tensorflow-2021-29563, CVE-2021-29563, GHSA-ph87-fvjr-v33w, PYSEC-2021-200, PYSEC-2021-491, PYSEC-2021-689 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `EditDistance` BIT-tensorflow-2021-29564, CVE-2021-29564, GHSA-75f6-78jr-4656, PYSEC-2021-201, PYSEC-2021-492, PYSEC-2021-690 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Null pointer dereference in `SparseFillEmptyRows` BIT-tensorflow-2021-29565, CVE-2021-29565, GHSA-r6pg-pjwc-j585, PYSEC-2021-202, PYSEC-2021-493, PYSEC-2021-691 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Lack of validation in `SparseDenseCwiseMul` BIT-tensorflow-2021-29567, CVE-2021-29567, GHSA-wp3c-xw9g-gpcg, PYSEC-2021-204, PYSEC-2021-495, PYSEC-2021-693 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Reference binding to nullptr in `SdcaOptimizer` BIT-tensorflow-2021-29572, CVE-2021-29572, GHSA-5gqf-456p-4836, PYSEC-2021-209, PYSEC-2021-500, PYSEC-2021-698 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by 0 in `MaxPoolGradWithArgmax` BIT-tensorflow-2021-29573, CVE-2021-29573, GHSA-9vpm-rcf4-9wqw, PYSEC-2021-210, PYSEC-2021-501, PYSEC-2021-699 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Overflow/denial of service in `tf.raw_ops.ReverseSequence` BIT-tensorflow-2021-29575, CVE-2021-29575, GHSA-6qgm-fv6v-rfpv, PYSEC-2021-212, PYSEC-2021-503, PYSEC-2021-701 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Undefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad` BIT-tensorflow-2021-29580, CVE-2021-29580, GHSA-x8h6-xgqx-jqgp, PYSEC-2021-217, PYSEC-2021-508, PYSEC-2021-706 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault in `CTCBeamSearchDecoder` BIT-tensorflow-2021-29581, CVE-2021-29581, GHSA-vq2r-5xvm-3hc3, PYSEC-2021-218, PYSEC-2021-509, PYSEC-2021-707 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
CHECK-fail due to integer overflow BIT-tensorflow-2021-29584, CVE-2021-29584, GHSA-xvjm-fvxx-q3hv, PYSEC-2021-221, PYSEC-2021-512, PYSEC-2021-710 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of `DepthwiseConv` BIT-tensorflow-2021-29602, CVE-2021-29602, GHSA-rf3h-xgv5-2q39, PYSEC-2021-239, PYSEC-2021-530, PYSEC-2021-728 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Division by zero in TFLite's implementation of hashtable lookup BIT-tensorflow-2021-29604, CVE-2021-29604, GHSA-8rm6-75mf-7r7r, PYSEC-2021-241, PYSEC-2021-532, PYSEC-2021-730 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Integer overflow in TFLite memory allocation BIT-tensorflow-2021-29605, CVE-2021-29605, GHSA-jf7h-7m85-w2v2, PYSEC-2021-242, PYSEC-2021-533, PYSEC-2021-731 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Incomplete validation in `SparseReshape` BIT-tensorflow-2021-29611, CVE-2021-29611, GHSA-9rpc-5v9q-5r7f, PYSEC-2021-248, PYSEC-2021-539, PYSEC-2021-737 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Stack overflow in `ParseAttrValue` with nested tensors BIT-tensorflow-2021-29615, CVE-2021-29615, GHSA-qw5h-7f53-xrp6, PYSEC-2021-252, PYSEC-2021-543, PYSEC-2021-741 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Crash in `tf.strings.substr` due to `CHECK`-fail BIT-tensorflow-2021-29617, CVE-2021-29617, GHSA-mmq6-q8r3-48fm, PYSEC-2021-254, PYSEC-2021-545, PYSEC-2021-743 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Crash in `tf.transpose` with complex inputs BIT-tensorflow-2021-29618, CVE-2021-29618, GHSA-xqfj-cr6q-pc8w, PYSEC-2021-255, PYSEC-2021-546, PYSEC-2021-744 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Segfault in `tf.raw_ops.SparseCountSparseOutput` BIT-tensorflow-2021-29619, CVE-2021-29619, GHSA-wvjw-p9f5-vq28, PYSEC-2021-256, PYSEC-2021-547, PYSEC-2021-745 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Insecure template handling in express-hbs BIT-handlebars-2021-32817, CVE-2021-32817, GHSA-rwxp-hwwf-653v | Medium | 1.3% | 14 May, 2021 | npm express-hbs |
Division by 0 in `DenseCountSparseOutput` BIT-tensorflow-2021-29554, CVE-2021-29554, GHSA-qg48-85hg-mqc5, PYSEC-2021-191, PYSEC-2021-482, PYSEC-2021-680 | Medium | 0.2% | 14 May, 2021 | PyPI tensorflow PyPI tensorflow-cpu PyPI tensorflow-gpu |
Cross-site Scripting in aurelia-framework CVE-2019-10062, GHSA-m6j2-v3gq-45r5 | Medium | 1.4% | 13 May, 2021 | npm aurelia-framework |
Prevent user enumeration using Guard or the new Authenticator-based Security BIT-symfony-2021-21424, CVE-2021-21424, GHSA-5pv8-ppvj-4h68 | Medium | 1.6% | 13 May, 2021 | Packagist lexik/jwt-authentication-bundle Packagist symfony/maker-bundle Packagist symfony/security Packagist symfony/security-core +3 more |
Microsoft Exchange Server Security Feature Bypass Vulnerability CVE-2021-31207 | MediumExploited | 99.8% | 11 May, 2021 | |
Denial of service attack via push rule patterns in matrix-synapse CVE-2021-29471, GHSA-x345-32rc-8h85, PYSEC-2021-135 | Medium | 1.6% | 11 May, 2021 | PyPI matrix-synapse |
OctoPrint API Error Messages vulnerable to XSS CVE-2021-32561, GHSA-vcx4-fpmp-mvv6, PYSEC-2021-30 | Medium | 1.1% | 11 May, 2021 | PyPI OctoPrint PyPI octoprint |
EC-CUBE Cross-site scripting vulnerability CVE-2021-20717, GHSA-c8mx-43cq-993w | Medium | 2.3% | 10 May, 2021 | Packagist ec-cube/ec-cube |
Craft CMS Cross-site Scripting Vulnerability CVE-2021-32470, GHSA-h2rj-8wgg-mm43 | Medium | 0.7% | 07 May, 2021 | Packagist craftcms/cms |
Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet CVE-2021-21419, GHSA-9p9m-jm8w-94p2, PYSEC-2021-12 | Medium | 1.8% | 07 May, 2021 | PyPI eventlet |
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability CVE-2021-1906 | MediumExploited | 0.5% | 07 May, 2021 | |
Cross-site scripting in LocalStack CVE-2021-32091, GHSA-37m5-42qp-4qpr, PYSEC-2021-102 | Medium | 0.8% | 07 May, 2021 | PyPI localstack |
Cross-site scripting in forkcms CVE-2020-23263, GHSA-vp4x-94ff-2cmv | Medium | 0.8% | 06 May, 2021 | Packagist forkcms/forkcms |
Header injection possible in Django BIT-django-2021-32052, CVE-2021-32052, GHSA-qm57-vhq3-3fwf, PYSEC-2021-8 | Medium | 3.2% | 06 May, 2021 | PyPI Django PyPI django |
Possible Open Redirect Vulnerability in Action Pack CVE-2021-22903, GHSA-5hq2-xf89-9jxq | Medium | 1.2% | 05 May, 2021 | RubyGems actionpack |
Drupal Core Open Redirect vulnerability BIT-drupal-2020-13662, CVE-2020-13662, GHSA-gjqg-9rhv-qj67 | Medium | 0.9% | 05 May, 2021 | Packagist drupal/core Packagist drupal/drupal |
Bypass of fix for CVE-2020-26231, Twig sandbox escape CVE-2021-21264, GHSA-fcr8-6q7r-m4wg | Medium | 0.3% | 03 May, 2021 | Packagist october/cms |
Cross-site Scripting in Apache Airflow BIT-airflow-2021-28359, CVE-2021-28359, GHSA-3xxv-p78r-4fc6, PYSEC-2021-4 | Medium | 14.4% | 02 May, 2021 | PyPI apache-airflow |