PyPI/tensorflow CVE-2021-41200: medium 5.5, EPSS 0.24%

Incomplete validation in `tf.summary.create_file_writer`

Action: Upgrade tensorflow to 2.4.4 or later.

pip install tensorflow==2.6.1

pip install tensorflow==2.5.2

pip install tensorflow==2.4.4

Affected

Fixed versions

Sources

• osv: GHSA-gh8h-7j2j-qv4f
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh8h-7j2j-qv4f
• https://nvd.nist.gov/vuln/detail/CVE-2021-41200
• https://github.com/tensorflow/tensorflow/issues/46909
• https://github.com/tensorflow/tensorflow/commit/874bda09e6702cd50bac90b453b50bcc65b2769e
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-610.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-808.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-393.yaml
• https://github.com/tensorflow/tensorflow

CVE-2021-41200 · published 2021-11-10T19:31:16Z · modified 2026-07-08T06:29:41.426570028Z · JSON