PyPI/tensorflow-gpu CVE-2022-41911: medium 4.8, EPSS 0.43%
Invalid char to bool conversion when printing a tensor
Action: Upgrade tensorflow-gpu to 2.8.4 or later.
pip install tensorflow-gpu==2.10.1pip install tensorflow-gpu==2.8.4pip install tensorflow-gpu==2.9.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.10.0 | 2.10.1 | - |
| 0 | 2.8.4 | - |
| 2.9.0 | 2.9.3 | - |
Fixed versions
| 2.10.1 | 2.8.4 | 2.9.3 |
Sources
- osv: GHSA-pf36-r9c6-h97j#PyPI/tensorflow-gpu
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pf36-r9c6-h97j
- https://nvd.nist.gov/vuln/detail/CVE-2022-41911
- https://github.com/tensorflow/tensorflow/commit/1be743703279782a357adbf9b77dcb994fe8b508
- https://github.com/tensorflow/tensorflow
- https://github.com/tensorflow/tensorflow/blob/807cae8a807960fd7ac2313cde73a11fc15e7942/tensorflow/core/framework/tensor.cc#L1200-L1227
CVE-2022-41911 · published · modified · JSON