OSSIndex / vulns

Report missing advisories and corrections on OSS Index
17 stars 12 forks source link

TensorFlow - CVE-2021-37690 #201

Open kekkegenkai opened 3 years ago

kekkegenkai commented 3 years ago

It seems that CVE-2021-37690 is not present for the packages tensorflow, tensorflow-cpu, tensorflow-gpu < 2.6.0

Advisory details

  URL: https://nvd.nist.gov/vuln/detail/CVE-2021-37690
  format: pypi
  namespace: 
  name: tensorflow, tensorflow-cpu, tensorflow-gpu
  versions: < 2.6.0 

More information https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3hxh-8cp2-g4hg

ken-duck commented 3 years ago

We have added the data for tensorflow and tensorflow-gpu and should show up sometime tomorrow. There is an issue adding it to tensorflow-cpu that will take a little bit longer to resolve. Thanks for the heads up!