{"action":"Upgrade tensorflow to 2.1.4 or later.","affected":[{"fixed":"2.1.4","introduced":"0"},{"fixed":"2.2.3","introduced":"2.2.0"},{"fixed":"2.3.3","introduced":"2.3.0"},{"fixed":"2.4.2","introduced":"2.4.0"}],"component":"tensorflow","cve_ids":["CVE-2021-29591"],"ecosystem":"PyPI","epss":0.00262,"exploited":false,"fixed_versions":["2.1.4","2.2.3","2.3.3","2.4.2"],"ghsa_id":"GHSA-cwv3-863g-39vx","id":"tcs_01M5KFDYS5BH4MQZN66T4ZB2T5","modified_at":"2026-07-08T06:29:10.118484992Z","published_at":"2021-05-21T14:26:56Z","references":["https://osv.dev/vulnerability/GHSA-cwv3-863g-39vx","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cwv3-863g-39vx","https://nvd.nist.gov/vuln/detail/CVE-2021-29591","https://github.com/tensorflow/tensorflow/commit/9c1dc920d8ffb4893d6c9d27d1f039607b326743","https://github.com/tensorflow/tensorflow/commit/c6173f5fe66cdbab74f4f869311fe6aae2ba35f4","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-519.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-717.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-228.yaml","https://github.com/tensorflow/tensorflow","https://github.com/tensorflow/tensorflow/blob/106d8f4fb89335a2c52d7c895b7a7485465ca8d9/tensorflow/lite/kernels/while.cc"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-cwv3-863g-39vx","url":"https://osv.dev/vulnerability/GHSA-cwv3-863g-39vx"}],"summary":"Stack overflow due to looping TFLite subgraph"}