{"action":"Upgrade tensorflow to 2.1.4 or later.","affected":[{"fixed":"2.1.4","introduced":"0"},{"fixed":"2.2.3","introduced":"2.2.0"},{"fixed":"2.3.3","introduced":"2.3.0"},{"fixed":"2.4.2","introduced":"2.4.0"}],"component":"tensorflow","cve_ids":["CVE-2021-29590"],"ecosystem":"PyPI","epss":0.00198,"exploited":false,"fixed_versions":["2.1.4","2.2.3","2.3.3","2.4.2"],"ghsa_id":"GHSA-24x6-8c7m-hv3f","id":"tcs_01M5KERT1TZ4P4T8TK7CVC4TPV","modified_at":"2026-07-08T06:28:50.023617065Z","published_at":"2021-05-21T14:26:53Z","references":["https://osv.dev/vulnerability/GHSA-24x6-8c7m-hv3f","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-24x6-8c7m-hv3f","https://nvd.nist.gov/vuln/detail/CVE-2021-29590","https://github.com/tensorflow/tensorflow/commit/953f28dca13c92839ba389c055587cfe6c723578","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-518.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-716.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-227.yaml","https://github.com/tensorflow/tensorflow","https://github.com/tensorflow/tensorflow/blob/0d45ea1ca641b21b73bcf9c00e0179cda284e7e7/tensorflow/lite/kernels/internal/reference/maximum_minimum.h#L52-L56"],"severity":{"label":"low","score":2.5},"sources":[{"source":"osv","source_id":"GHSA-24x6-8c7m-hv3f","url":"https://osv.dev/vulnerability/GHSA-24x6-8c7m-hv3f"}],"summary":"Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`"}