PyPI/tensorflow CVE-2020-26269: unknown, EPSS 0.70%

In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the direct

Action: Upgrade tensorflow to 2.4.0 or later.

pip install tensorflow==2.4.0

Affected

Fixed versions

Sources

• osv: PYSEC-2020-141
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9jjw-hf72-3mxw
• https://github.com/tensorflow/tensorflow/commit/8b5b9dc96666a3a5d27fad7179ff215e3b74b67c

CVE-2020-26269 · published 2020-12-10T23:15:00Z · modified 2023-12-06T01:00:27.809388Z · JSON