{"data":{"id":"348483d7-8bbe-4c9d-b9ac-53ce505c6f36","title":"CVE-2022-29216: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4…","summary":"TensorFlow versions before 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a code injection flaw in the `saved_model_cli` tool that can be used to open a reverse shell. The code path existed for compatibility with test cases that pass numpy expressions as arguments, and the source notes the tool is always run manually, so the impact is described as not severe.","solution":"The maintainers removed the `safe=False` argument so all parsing is done without calling `eval`. The patch is available in versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-29216","publishedAt":"2022-05-21T04:15:11.980Z","cveId":"CVE-2022-29216","cweIds":["CWE-94"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["tensorflow@< 2.6.4 (fixed: 2.6.4)","tensorflow-cpu@< 2.6.4 (fixed: 2.6.4)","tensorflow-gpu@< 2.6.4 (fixed: 2.6.4)","tensorflow@>= 2.7.0, < 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.7.0, < 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.7.0, < 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)"],"affectedPackageNames":["tensorflow","tensorflow-cpu","tensorflow-gpu"],"affectedPackageRefs":["pypi:tensorflow","pypi:tensorflow-cpu","pypi:tensorflow-gpu"],"affectedVendors":["Google"],"affectedVendorsRaw":["TensorFlow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"TensorFlow saved_model_cli code injection through eval of arguments","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00549,"epssCheckedAt":"2026-11-04T06:10:13.820Z","kevDateAdded":null,"advisoryAliases":["GHSA-75c9-jrh4-79mc"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:58:09.775Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2022-05-16T18:35:54.612Z","daysToFix":-5,"fixCheckedAt":"2026-10-29T21:48:36.175Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"tensorflow-gpu","fixedVersion":"2.6.4","matchedVersion":"2.6.4","fixReleasedAt":"2022-05-16T18:40:15.414Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:48:36.022Z"},{"ecosystem":"pypi","name":"tensorflow-cpu","fixedVersion":"2.8.1","matchedVersion":"2.8.1","fixReleasedAt":"2022-05-16T19:23:13.921Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:48:36.022Z"},{"ecosystem":"pypi","name":"tensorflow-cpu","fixedVersion":"2.7.2","matchedVersion":"2.7.2","fixReleasedAt":"2022-05-16T18:55:45.407Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:48:36.022Z"},{"ecosystem":"pypi","name":"tensorflow","fixedVersion":"2.8.1","matchedVersion":"2.8.1","fixReleasedAt":"2022-05-16T19:21:57.289Z","daysToFix":-5,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:48:36.022Z"},{"ecosystem":"pypi","name":"tensorflow-cpu","fixedVersion":"2.6.4","matchedVersion":"2.6.4","fixReleasedAt":"2022-05-16T18:36:58.498Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:48:36.022Z"},{"ecosystem":"pypi","name":"tensorflow-gpu","fixedVersion":"2.8.1","matchedVersion":"2.8.1","fixReleasedAt":"2022-05-16T19:27:17.566Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:48:36.022Z"},{"ecosystem":"pypi","name":"tensorflow-gpu","fixedVersion":"2.7.2","matchedVersion":"2.7.2","fixReleasedAt":"2022-05-16T18:59:09.959Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:48:36.022Z"},{"ecosystem":"pypi","name":"tensorflow","fixedVersion":"2.6.4","matchedVersion":"2.6.4","fixReleasedAt":"2022-05-16T18:35:54.612Z","daysToFix":-5,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:48:36.022Z"},{"ecosystem":"pypi","name":"tensorflow","fixedVersion":"2.7.2","matchedVersion":"2.7.2","fixReleasedAt":"2022-05-16T18:54:48.982Z","daysToFix":-5,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:48:36.022Z"}]}}