{"action":"Upgrade tensorflow to 1.7.0 or later.","affected":[{"fixed":"1.7.0","introduced":"0"}],"component":"tensorflow","cve_ids":["CVE-2018-21233"],"ecosystem":"PyPI","epss":0.00584,"exploited":false,"fixed_versions":["1.7.0"],"ghsa_id":"GHSA-h98h-8mxr-m8gx","id":"tcs_01M5KFKAE620A9HEVWFVNE1P1B","modified_at":"2024-10-28T14:44:19.394947Z","published_at":"2020-05-13T16:01:35Z","references":["https://osv.dev/vulnerability/GHSA-h98h-8mxr-m8gx","https://nvd.nist.gov/vuln/detail/CVE-2018-21233","https://github.com/tensorflow/tensorflow/commit/49f73c55d56edffebde4bca4a407ad69c1cae433","https://github.com/advisories/GHSA-h98h-8mxr-m8gx","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-269.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-304.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-253.yaml","https://github.com/tensorflow/tensorflow","https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-001.md"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-h98h-8mxr-m8gx","url":"https://osv.dev/vulnerability/GHSA-h98h-8mxr-m8gx"}],"summary":"Out-of-bounds read in TensorFlow possibly causing disclosure of the contents of process memory."}