Skip to content

tensorflow

TensorFlow is an open source machine learning framework for everyone.

No LLM SDK, agent framework or MCP dependency in its latest release, and none among the tracked dependencies.

PyPILatest 2.21.0First release 2016-12-19Registry pageRepositoryChecked 2026-10-09

Advisories

Advisories that name tensorflow as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.

AdvisorySeverityAffectedFixed inPublished
CVE-2023-33976CVE-2023-33976: TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when…High< 2.12.12.12.12024-07-31
CVE-2023-25661CVE-2023-25661: TensorFlow is an Open Source Machine Learning Framework. In versions prior to 2.11.1 a malicious invalid input crashes…Medium< 2.11.12.11.12023-03-28
CVE-2023-27579CVE-2023-27579: TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater…High< 2.11.12.11.12023-03-25
CVE-2023-25801CVE-2023-25801: TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1…High< 2.11.12.11.12023-03-25
CVE-2023-25676CVE-2023-25676: TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA…High< 2.11.12.11.12023-03-25
CVE-2023-25675CVE-2023-25675: TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA…High< 2.11.12.11.12023-03-25
CVE-2023-25674CVE-2023-25674: TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error…High< 2.11.12.11.12023-03-25
CVE-2023-25673CVE-2023-25673: TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point…High< 2.11.12.11.12023-03-25
CVE-2023-25672CVE-2023-25672: TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle…High< 2.11.12.11.12023-03-25
CVE-2023-25671CVE-2023-25671: TensorFlow is an open source platform for machine learning. There is out-of-bounds access due to mismatched integer…High< 2.11.12.11.12023-03-25
CVE-2023-25670CVE-2023-25670: TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error…High< 2.11.12.11.12023-03-25
CVE-2023-25669CVE-2023-25669: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and…High< 2.11.12.11.12023-03-25
CVE-2023-25668CVE-2023-25668: TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can…Critical< 2.11.12.11.12023-03-25
CVE-2023-25667CVE-2023-25667: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow…Medium< 2.11.12.11.12023-03-25
CVE-2023-25666CVE-2023-25666: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a floating…High< 2.11.12.11.12023-03-25
CVE-2023-25665CVE-2023-25665: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when…High< 2.11.12.11.12023-03-25
CVE-2023-25664CVE-2023-25664: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer…High< 2.11.12.11.12023-03-25
CVE-2023-25663CVE-2023-25663: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when…High< 2.11.12.11.12023-03-25
CVE-2023-25662CVE-2023-25662: TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 are vulnerable to…High< 2.11.12.11.12023-03-25
CVE-2023-25660CVE-2023-25660: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter…High< 2.11.12.11.12023-03-25
CVE-2023-25659CVE-2023-25659: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the parameter…High< 2.11.12.11.12023-03-25
CVE-2023-25658CVE-2023-25658: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, an out of bounds read…High< 2.11.12.11.12023-03-25
CVE-2022-41910CVE-2022-41910: TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that…Medium< 2.8.42.8.42022-12-07
CVE-2022-41902CVE-2022-41902: TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that…High< 2.8.42.8.42022-12-07
CVE-2022-41911CVE-2022-41911: TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a `const char*`…Medium< 2.8.42.8.42022-11-19
CVE-2022-41909CVE-2022-41909: TensorFlow is an open source platform for machine learning. An input `encoded` that is not a valid…Medium< 2.8.42.8.42022-11-19
CVE-2022-41908CVE-2022-41908: TensorFlow is an open source platform for machine learning. An input `token` that is not a UTF-8 bytestring will…Medium< 2.8.42.8.42022-11-19
CVE-2022-41907CVE-2022-41907: TensorFlow is an open source platform for machine learning. When `tf.raw_ops.ResizeNearestNeighborGrad` is given a…Medium< 2.8.42.8.42022-11-19
CVE-2022-41901CVE-2022-41901: TensorFlow is an open source platform for machine learning. An input `sparse_matrix` that is not a matrix with a shape…Medium< 2.8.42.8.42022-11-19
CVE-2022-41900CVE-2022-41900: TensorFlow is an open source platform for machine learning. The security vulnerability results in…High< 2.8.42.8.42022-11-19
CVE-2022-41899CVE-2022-41899: TensorFlow is an open source platform for machine learning. Inputs `dense_features` or `example_state_data` not of rank…Medium< 2.8.42.8.42022-11-19
CVE-2022-41898CVE-2022-41898: TensorFlow is an open source platform for machine learning. If `SparseFillEmptyRowsGrad` is given empty inputs…Medium< 2.8.42.8.42022-11-19
CVE-2022-41897CVE-2022-41897: TensorFlow is an open source platform for machine learning. If `FractionMaxPoolGrad` is given outsize inputs…Medium< 2.8.42.8.42022-11-19
CVE-2022-41896CVE-2022-41896: TensorFlow is an open source platform for machine learning. If `ThreadUnsafeUnigramCandidateSampler` is given input…Medium< 2.8.42.8.42022-11-19
CVE-2022-41895CVE-2022-41895: TensorFlow is an open source platform for machine learning. If `MirrorPadGrad` is given outsize input `paddings`…Medium< 2.8.42.8.42022-11-19
CVE-2022-41894CVE-2022-41894: TensorFlow is an open source platform for machine learning. The reference kernel of the `CONV_3D_TRANSPOSE` TensorFlow…High< 2.8.42.8.42022-11-19
CVE-2022-41893CVE-2022-41893: TensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListResize` is given a nonscalar value…Medium< 2.8.42.8.42022-11-19
CVE-2022-41891CVE-2022-41891: TensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListConcat` is given…Medium< 2.8.42.8.42022-11-19
CVE-2022-41890CVE-2022-41890: TensorFlow is an open source platform for machine learning. If `BCast::ToShape` is given input larger than an `int32`…Medium< 2.8.42.8.42022-11-19
CVE-2022-41889CVE-2022-41889: TensorFlow is an open source platform for machine learning. If a list of quantized tensors is assigned to an attribute…Medium< 2.8.42.8.42022-11-19
CVE-2022-41888CVE-2022-41888: TensorFlow is an open source platform for machine learning. When running on GPU…Medium< 2.8.42.8.42022-11-19
CVE-2022-41887CVE-2022-41887: TensorFlow is an open source platform for machine learning. `tf.keras.losses.poisson` receives a `y_pred` and `y_true`…Medium< 2.9.32.9.32022-11-19
CVE-2022-41886CVE-2022-41886: TensorFlow is an open source platform for machine learning. When `tf.raw_ops.ImageProjectiveTransformV2` is given a…Medium< 2.8.42.8.42022-11-19
CVE-2022-41885CVE-2022-41885: TensorFlow is an open source platform for machine learning. When `tf.raw_ops.FusedResizeAndPadConv2D` is given a large…Medium< 2.7.42.7.42022-11-19
CVE-2022-41884CVE-2022-41884: TensorFlow is an open source platform for machine learning. If a numpy array is created with a shape such that one…Medium< 2.8.42.8.42022-11-19
CVE-2022-41880CVE-2022-41880: TensorFlow is an open source platform for machine learning. When the `BaseCandidateSamplerOp` function receives a value…Medium>= 2.10.0, < 2.10.12.10.12022-11-19
CVE-2022-41883CVE-2022-41883: TensorFlow is an open source platform for machine learning. When ops that have specified input sizes receive a…Medium= 2.10.02.10.12022-11-19
CVE-2022-36027CVE-2022-36027: TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel…Medium< 2.7.22.7.22022-09-17
CVE-2022-36017CVE-2022-36017: TensorFlow is an open source platform for machine learning. If `Requantize` is given `input_min`, `input_max`…Medium< 2.7.22.7.22022-09-17
CVE-2022-36016CVE-2022-36016: TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives…Medium< 2.7.22.7.22022-09-17

Dependencies of the latest release

As declared in PyPI metadata for version 2.21.0. Optional extras are listed with their extra name.

Tracked packages that depend on it

Among the packages in the registry; not every dependent on PyPI.