{"action":"Upgrade tensorflow to 2.4.0 or later.","affected":[{"fixed":"2.4.0","introduced":"2.4.0rc0"}],"component":"tensorflow","cve_ids":["CVE-2020-26269"],"ecosystem":"PyPI","epss":0.00697,"exploited":false,"fixed_versions":["2.4.0"],"ghsa_id":"GHSA-9jjw-hf72-3mxw","id":"tcs_01M5KFB2BPHQEHNDNBAZPMN99K","modified_at":"2026-09-10T03:49:46.420066944Z","published_at":"2022-10-07T07:22:33Z","references":["https://osv.dev/vulnerability/GHSA-9jjw-hf72-3mxw","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9jjw-hf72-3mxw","https://nvd.nist.gov/vuln/detail/CVE-2020-26269","https://github.com/tensorflow/tensorflow/pull/40861","https://github.com/tensorflow/tensorflow/pull/44310","https://github.com/tensorflow/tensorflow/commit/8b5b9dc96666a3a5d27fad7179ff215e3b74b67c","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-300.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-335.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-141.yaml","https://github.com/tensorflow/tensorflow","https://github.com/tensorflow/tensorflow/blob/458c6260265c46ebaf18052d6c61aea4b6b40926/tensorflow/core/platform/file_system_helper.cc#L106","https://github.com/tensorflow/tensorflow/blob/458c6260265c46ebaf18052d6c61aea4b6b40926/tensorflow/core/platform/file_system_helper.cc#L127"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-9jjw-hf72-3mxw","url":"https://osv.dev/vulnerability/GHSA-9jjw-hf72-3mxw"}],"summary":"TensorFlow vulnerable to heap out of bounds read in filesystem glob matching"}