{"action":"Upgrade tensorflow-cpu to 2.5.3 or later.","affected":[{"fixed":"2.5.3","introduced":"0"},{"fixed":"2.6.3","introduced":"2.6.0"},{"fixed":"2.7.1","introduced":"2.7.0"}],"component":"tensorflow-cpu","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["2.5.3","2.6.3","2.7.1"],"ghsa_id":"GHSA-h6gw-r52c-724r","id":"tcs_01M5KFK06S9RF7AFHRTR9FEHR1","modified_at":"2024-12-05T05:33:50.956326Z","published_at":"2022-02-09T23:38:36Z","references":["https://osv.dev/vulnerability/GHSA-h6gw-r52c-724r","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-57wx-m983-2f88","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h6gw-r52c-724r","https://github.com/tensorflow/tensorflow","https://github.com/tensorflow/tensorflow/blob/e0b6e58c328059829c3eb968136f17aa72b6c876/tensorflow/core/kernels/boosted_trees/stats_ops.cc"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-h6gw-r52c-724r#PyPI/tensorflow-cpu","url":"https://osv.dev/vulnerability/GHSA-h6gw-r52c-724r"}],"summary":"NULL Pointer Dereference and Access of Uninitialized Pointer in TensorFlow"}