{"action":"Upgrade tensorflow-cpu to 2.1.4 or later.","affected":[{"fixed":"2.1.4","introduced":"0"},{"fixed":"2.2.3","introduced":"2.2.0"},{"fixed":"2.3.3","introduced":"2.3.0"},{"fixed":"2.4.2","introduced":"2.4.0"}],"component":"tensorflow-cpu","cve_ids":["CVE-2021-29586"],"ecosystem":"PyPI","epss":0.00201,"exploited":false,"fixed_versions":["2.1.4","2.2.3","2.3.3","2.4.2"],"ghsa_id":"GHSA-26j7-6w8w-7922","id":"tcs_01M5KERZCQAMKCN73M1KA4VMT9","modified_at":"2026-07-08T06:30:03.625748313Z","published_at":"2021-05-21T14:26:43Z","references":["https://osv.dev/vulnerability/GHSA-26j7-6w8w-7922","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-26j7-6w8w-7922","https://nvd.nist.gov/vuln/detail/CVE-2021-29586","https://github.com/tensorflow/tensorflow/commit/5f7975d09eac0f10ed8a17dbb6f5964977725adc","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-514.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-712.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-223.yaml","https://github.com/tensorflow/tensorflow","https://github.com/tensorflow/tensorflow/blob/3f24ccd932546416ec906a02ddd183b48a1d2c83/tensorflow/lite/kernels/pooling.cc#L90"],"severity":{"label":"low","score":2.5},"sources":[{"source":"osv","source_id":"GHSA-26j7-6w8w-7922#PyPI/tensorflow-cpu","url":"https://osv.dev/vulnerability/GHSA-26j7-6w8w-7922"}],"summary":"Division by zero in optimized pooling implementations in TFLite"}