PyPI/tensorflow-cpu CVE-2022-41888: medium 4.8, EPSS 0.47%

FPE in `tf.image.generate_bounding_box_proposals`

Action: Upgrade tensorflow-cpu to 2.8.4 or later.

pip install tensorflow-cpu==2.8.4

pip install tensorflow-cpu==2.9.3

pip install tensorflow-cpu==2.10.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3288
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6x99-gv2v-q76v
• https://nvd.nist.gov/vuln/detail/CVE-2022-41888
• https://github.com/tensorflow/tensorflow/commit/cf35502463a88ca7185a99daa7031df60b3c1c98
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/generate_box_proposals_op.cu.cc
• https://pypi.org/project/tensorflow-cpu
• https://github.com/advisories/GHSA-6x99-gv2v-q76v

CVE-2022-41888 · published 2026-07-13T14:19:52.530300Z · modified 2026-07-13T16:43:21.372717113Z · JSON