CVE-2022-23579

6 advisories.

PyPI/tensorflow CVE-2022-23579: medium 6.5

`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow

Action: Upgrade tensorflow to 2.5.3 or later.

pip install tensorflow==2.5.3

pip install tensorflow==2.6.3

pip install tensorflow==2.7.1

Affected

introduced	fixed	last affected
0	2.5.3	-
2.6.0	2.6.3	-
2.7.0	2.7.1	-

Fixed versions

2.5.3

2.6.3

2.7.1

Sources

CVE-2022-23579 · published 2022-02-10T00:33:29Z · modified 2026-07-13T16:43:20.590351641Z · JSON

PyPI/tensorflow-cpu CVE-2022-23579: medium 6.5

`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow

Action: Upgrade tensorflow-cpu to 2.5.3 or later.

pip install tensorflow-cpu==2.5.3

pip install tensorflow-cpu==2.6.3

pip install tensorflow-cpu==2.7.1

Affected

introduced	fixed	last affected
0	2.5.3	-
2.6.0	2.6.3	-
2.7.0	2.7.1	-

Fixed versions

2.5.3

2.6.3

2.7.1

Sources

CVE-2022-23579 · published 2022-02-10T00:33:29Z · modified 2026-07-13T16:43:20.590351641Z · JSON

PyPI/tensorflow-gpu CVE-2022-23579: medium 6.5

`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow

Action: Upgrade tensorflow-gpu to 2.5.3 or later.

pip install tensorflow-gpu==2.5.3

pip install tensorflow-gpu==2.6.3

pip install tensorflow-gpu==2.7.1

Affected

introduced	fixed	last affected
0	2.5.3	-
2.6.0	2.6.3	-
2.7.0	2.7.1	-

Fixed versions

2.5.3

2.6.3

2.7.1

Sources

CVE-2022-23579 · published 2022-02-10T00:33:29Z · modified 2026-07-13T16:43:20.590351641Z · JSON

PyPI/tensorflow-gpu CVE-2022-23579: unknown

Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `SafeToRemoveIdentity` would

Action: Upgrade tensorflow-gpu to 2.5.3 or later.

pip install tensorflow-gpu==2.5.3

pip install tensorflow-gpu==2.6.3

Affected

introduced	fixed	last affected
0	2.5.3	-
2.6.0	2.6.3	-

Fixed versions

2.5.3

2.6.3

Sources

CVE-2022-23579 · published 2022-02-04T23:15:00Z · modified 2026-07-13T16:43:20.590351641Z · JSON

PyPI/tensorflow-cpu CVE-2022-23579: unknown

Action: Upgrade tensorflow-cpu to 2.5.3 or later.

pip install tensorflow-cpu==2.5.3

pip install tensorflow-cpu==2.6.3

Affected

introduced	fixed	last affected
0	2.5.3	-
2.6.0	2.6.3	-

Fixed versions

2.5.3

2.6.3

Sources

CVE-2022-23579 · published 2022-02-04T23:15:00Z · modified 2026-07-13T16:43:20.590351641Z · JSON

PyPI/tensorflow CVE-2022-23579: medium 6.5

`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow

Action: Upgrade tensorflow to 2.5.3 or later.

pip install tensorflow==2.5.3

pip install tensorflow==2.6.3

pip install tensorflow==2.7.1

Affected

introduced	fixed	last affected
0	2.5.3	-
2.6.0	2.6.3	-
2.7.0	2.7.1	-

Fixed versions

2.5.3

2.6.3

2.7.1

Sources

CVE-2022-23579 · published 2026-07-09T16:49:44.582223Z · modified 2026-07-13T16:43:20.590351641Z · JSON