Security vulnerabilities is specified tensorflow dependencies

Shawn-Shan / fawkes

Fawkes, privacy preserving tool against facial recognition systems. More info at https://sandlab.cs.uchicago.edu/fawkes

https://sandlab.cs.uchicago.edu/fawkes

BSD 3-Clause "New" or "Revised" License

5.22k stars 481 forks source link

Security vulnerabilities is specified tensorflow dependencies #115

Closed xirkus closed 3 years ago

xirkus commented 3 years ago

Can remediate most issues by upgrading to the latest patched version of 1.15.5 (although the recommended version is 2.4.0 according to Dependabot). Not sure if fawkes supports tensorflow 2.4.0 yet.

MarkSCQ commented 3 years ago

In the setup, it mentioned that Fawkes can only use tf<=1.15. I tried to run it under tf 2.2 using Pycharm, but it is frozen. Migration from tf1 to tf2 might take some time. (^◕.◕^)

Shawn-Shan commented 3 years ago

Basically what @MarkSCQ said. Upgrading to tf2 requires some work, but we are actively working on a version with tf2 and better protection. Should come out in a month or so.