{"action":"Upgrade tensorflow to 1.15.2 or later.","affected":[{"fixed":"1.15.2","introduced":"0"},{"fixed":"2.0.1","introduced":"2.0.0"}],"component":"tensorflow","cve_ids":["CVE-2020-5215"],"ecosystem":"PyPI","epss":0.00588,"exploited":false,"fixed_versions":["1.15.2","2.0.1"],"ghsa_id":"GHSA-977j-xj7q-2jr9","id":"tcs_01M5KGA35A1BWT1QFFT5PFPGRT","modified_at":"2023-12-06T01:00:35.702294Z","published_at":"2020-01-28T22:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-258","https://github.com/tensorflow/tensorflow/releases/tag/v1.15.2","https://github.com/tensorflow/tensorflow/commit/5ac1b9e24ff6afc465756edf845d2e9660bd34bf","https://github.com/tensorflow/tensorflow/releases/tag/v2.0.1","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-977j-xj7q-2jr9"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-258","url":"https://osv.dev/vulnerability/PYSEC-2020-258"}],"summary":"In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the grap"}