PyPI/tensorflow CVE-2020-15197: medium 6.3, EPSS 0.73%

Denial of Service in Tensorflow

Action: Upgrade tensorflow to 2.3.1 or later.

pip install tensorflow==2.3.1

Affected

Fixed versions

Sources

• osv: GHSA-qc53-44cj-vfvx
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qc53-44cj-vfvx
• https://nvd.nist.gov/vuln/detail/CVE-2020-15197
• https://github.com/tensorflow/tensorflow/commit/3cbb917b4714766030b28eba9fb41bb97ce9ee02
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-277.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-312.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-120.yaml
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1

CVE-2020-15197 · published 2020-09-25T18:28:30Z · modified 2026-07-08T06:00:12.028180655Z · JSON