tocsin

PyPI/tensorflow-cpu CVE-2022-23563: unknown, EPSS 0.11%

Tensorflow is an Open Source Machine Learning Framework. In multiple places, TensorFlow uses `tempfile.mktemp` to create temporary files. While this is acceptable in testing, in utilities and librarie

Action: Upgrade tensorflow-cpu to 2.5.3 or later.

pip install tensorflow-cpu==2.5.3
pip install tensorflow-cpu==2.6.3

Affected

introducedfixedlast affected
02.5.3-
2.6.02.6.3-

Fixed versions

2.5.32.6.3

Sources

CVE-2022-23563 · published · modified · JSON