{"action":"Upgrade tensorflow-cpu to 2.1.4 or later.","affected":[{"fixed":"2.1.4","introduced":"0"},{"fixed":"2.2.3","introduced":"2.2.0"},{"fixed":"2.3.3","introduced":"2.3.0"},{"fixed":"2.4.2","introduced":"2.4.0"}],"component":"tensorflow-cpu","cve_ids":["CVE-2021-29571"],"ecosystem":"PyPI","epss":0.0024,"exploited":false,"fixed_versions":["2.1.4","2.2.3","2.3.3","2.4.2"],"ghsa_id":"GHSA-whr9-vfh2-7hm6","id":"tcs_01M5KG299K75HATHFBVGC1BHWC","modified_at":"2026-07-08T06:27:25.544570231Z","published_at":"2021-05-21T14:25:28Z","references":["https://osv.dev/vulnerability/GHSA-whr9-vfh2-7hm6","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-whr9-vfh2-7hm6","https://nvd.nist.gov/vuln/detail/CVE-2021-29571","https://github.com/tensorflow/tensorflow/commit/79865b542f9ffdc9caeb255631f7c56f1d4b6517","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-499.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-697.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-208.yaml","https://github.com/tensorflow/tensorflow"],"severity":{"label":"medium","score":4.5},"sources":[{"source":"osv","source_id":"GHSA-whr9-vfh2-7hm6#PyPI/tensorflow-cpu","url":"https://osv.dev/vulnerability/GHSA-whr9-vfh2-7hm6"}],"summary":"Memory corruption in `DrawBoundingBoxesV2`"}