PyPI/tensorflow-cpu CVE-2021-37681: high 7.8, EPSS 0.17%

NPE in TFLite

Action: Upgrade tensorflow-cpu to 2.3.4 or later.

pip install tensorflow-cpu==2.3.4

pip install tensorflow-cpu==2.4.3

pip install tensorflow-cpu==2.5.1

Affected

Fixed versions

Sources

• osv: GHSA-7xwj-5r4v-429p#PyPI/tensorflow-cpu
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7xwj-5r4v-429p
• https://nvd.nist.gov/vuln/detail/CVE-2021-37681
• https://github.com/tensorflow/tensorflow/commit/5b048e87e4e55990dae6b547add4dae59f4e1c76
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-594.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-792.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-303.yaml
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/svdf.cc#L300-L313

CVE-2021-37681 · published 2021-08-25T14:40:35Z · modified 2026-07-08T06:28:48.064052428Z · JSON