{"action":"Upgrade tensorflow to 2.4.0 or later.","affected":[{"fixed":"2.4.0","introduced":"0"}],"component":"tensorflow","cve_ids":["CVE-2020-15266"],"ecosystem":"PyPI","epss":0.0094,"exploited":false,"fixed_versions":["2.4.0"],"ghsa_id":"GHSA-xwhf-g6j5-j5gc","id":"tcs_01M5KG9H0H1KJ1R3EQ8827VHH7","modified_at":"2023-12-06T01:00:17.667384Z","published_at":"2020-10-21T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-139","https://github.com/tensorflow/tensorflow/pull/42143/commits/3ade2efec2e90c6237de32a19680caaa3ebc2845","https://github.com/tensorflow/tensorflow/issues/42129","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xwhf-g6j5-j5gc"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2020-139","url":"https://osv.dev/vulnerability/PYSEC-2020-139"},{"source":"nvd","source_id":"CVE-2020-15266","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15266"}],"summary":"In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel implementation receives it as a C++ `nan` floating point value. Attem"}