PyPI/tensorflow-cpu CVE-2021-37686: medium 5.5, EPSS 0.17%

Infinite loop in TFLite

Action: Upgrade tensorflow-cpu to 2.6.0rc2 or later.

pip install tensorflow-cpu==2.6.0rc2

Affected

Fixed versions

Sources

• osv: GHSA-mhhc-q96p-mfm9#PyPI/tensorflow-cpu
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mhhc-q96p-mfm9
• https://nvd.nist.gov/vuln/detail/CVE-2021-37686
• https://github.com/tensorflow/tensorflow/commit/dfa22b348b70bb89d6d6ec0ff53973bacb4f4695
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-599.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-797.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-308.yaml
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.4
• https://github.com/tensorflow/tensorflow/releases/tag/v2.4.3
• https://github.com/tensorflow/tensorflow/releases/tag/v2.5.1
• https://github.com/tensorflow/tensorflow/releases/tag/v2.6.0

CVE-2021-37686 · published 2021-08-25T14:39:58Z · modified 2026-07-08T06:28:29.862814155Z · JSON