PyPI/tensorflow CVE-2022-29196: medium 5.5, EPSS 0.33%

Missing validation causes denial of service via `Conv3DBackpropFilterV2`

Action: Upgrade tensorflow to 2.6.4 or later.

pip install tensorflow==2.6.4

pip install tensorflow==2.7.2

pip install tensorflow==2.8.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3110
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5v77-j66x-4c4g
• https://nvd.nist.gov/vuln/detail/CVE-2022-29196
• https://github.com/tensorflow/tensorflow/commit/174c5096f303d5be7ed2ca2662b08371bff4ab88
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/conv_grad_ops_3d.cc
• https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
• https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2
• https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
• https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0
• https://pypi.org/project/tensorflow
• https://github.com/advisories/GHSA-5v77-j66x-4c4g

CVE-2022-29196 · published 2026-07-09T16:49:48.130316Z · modified 2026-07-13T16:43:50.108040983Z · JSON