{"action":"Upgrade tensorflow-cpu to 2.2.1 or later.","affected":[{"fixed":"2.2.1","introduced":"2.2.0"},{"fixed":"2.3.1","introduced":"2.3.0"}],"component":"tensorflow-cpu","cve_ids":["CVE-2020-15212"],"ecosystem":"PyPI","epss":0.00737,"exploited":false,"fixed_versions":["2.3.1","2.2.1"],"ghsa_id":"GHSA-hx2x-85gr-wrpq","id":"tcs_01M5KGA9ZYWXBF5STC9727CTYA","modified_at":"2023-12-06T01:00:17.362685Z","published_at":"2020-09-25T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-292","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hx2x-85gr-wrpq","https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1","https://github.com/tensorflow/tensorflow/commit/204945b19e44b57906c9344c0d00120eeeae178a"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-292","url":"https://osv.dev/vulnerability/PYSEC-2020-292"}],"summary":"In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger writes outside of bounds of heap allocated buffers by inserting negative elements in the segment ids tensor. Us"}