{"action":"Upgrade tensorflow-cpu to 2.3.1 or later.","affected":[{"fixed":"2.3.1","introduced":"0"}],"component":"tensorflow-cpu","cve_ids":["CVE-2020-15196"],"ecosystem":"PyPI","epss":0.00911,"exploited":false,"fixed_versions":["2.3.1"],"ghsa_id":"GHSA-pg59-2f92-5cph","id":"tcs_01M5KGA6NCKAZGKQEKP7XQZTT0","modified_at":"2023-12-06T01:00:16.395326Z","published_at":"2020-09-25T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-276","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pg59-2f92-5cph","https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1","https://github.com/tensorflow/tensorflow/commit/3cbb917b4714766030b28eba9fb41bb97ce9ee02"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"PYSEC-2020-276","url":"https://osv.dev/vulnerability/PYSEC-2020-276"},{"source":"nvd","source_id":"CVE-2020-15196","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15196"}],"summary":"In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` implementations don't validate that the `weights` tensor has the same shape as the data. The check exists for `"}