{"action":"Upgrade tensorflow to 2.3.4 or later.","affected":[{"fixed":"2.3.4","introduced":"0"},{"fixed":"2.4.3","introduced":"2.4.0"},{"fixed":"2.5.1","introduced":"2.5.0"}],"component":"tensorflow","cve_ids":["CVE-2021-37652"],"ecosystem":"PyPI","epss":0.00173,"exploited":false,"fixed_versions":["2.3.4","2.4.3","2.5.1"],"ghsa_id":"GHSA-m7fm-4jfh-jrg6","id":"tcs_01M5KFQJBY19EADAHE9J47XEB7","modified_at":"2026-07-08T06:28:18.491911689Z","published_at":"2021-08-25T14:43:07Z","references":["https://osv.dev/vulnerability/GHSA-m7fm-4jfh-jrg6","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m7fm-4jfh-jrg6","https://nvd.nist.gov/vuln/detail/CVE-2021-37652","https://github.com/tensorflow/tensorflow/commit/5ecec9c6fbdbc6be03295685190a45e7eee726ab","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-565.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-763.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-274.yaml","https://github.com/tensorflow/tensorflow"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-m7fm-4jfh-jrg6","url":"https://osv.dev/vulnerability/GHSA-m7fm-4jfh-jrg6"}],"summary":"Use after free in boosted trees creation"}