{"action":"Upgrade tensorflow-cpu to 2.8.4 or later.","affected":[{"fixed":"2.10.1","introduced":"2.10.0"},{"fixed":"2.8.4","introduced":"0"},{"fixed":"2.9.3","introduced":"2.9.0"}],"component":"tensorflow-cpu","cve_ids":["CVE-2022-41880"],"ecosystem":"PyPI","epss":0.00427,"exploited":false,"fixed_versions":["2.10.1","2.8.4","2.9.3"],"ghsa_id":"GHSA-8w5g-3wcv-9g2j","id":"tcs_01M5KF97EPN2DG6HQPPCEJCY0V","modified_at":"2026-07-13T16:43:00.919386427Z","published_at":"2022-11-22T00:10:10Z","references":["https://osv.dev/vulnerability/GHSA-8w5g-3wcv-9g2j","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8w5g-3wcv-9g2j","https://nvd.nist.gov/vuln/detail/CVE-2022-41880","https://github.com/tensorflow/tensorflow/commit/b389f5c944cadfdfe599b3f1e4026e036f30d2d4","https://github.com/tensorflow/tensorflow","https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/candidate_sampler_ops.cc"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-8w5g-3wcv-9g2j#PyPI/tensorflow-cpu","url":"https://osv.dev/vulnerability/GHSA-8w5g-3wcv-9g2j"}],"summary":"Tensorflow vulnerable to Out-of-Bounds Read"}