{"action":"Upgrade tensorflow-cpu to 2.4.0 or later.","affected":[{"fixed":"2.4.0","introduced":"0"}],"component":"tensorflow-cpu","cve_ids":["CVE-2020-15266"],"ecosystem":"PyPI","epss":0.0094,"exploited":false,"fixed_versions":["2.4.0"],"ghsa_id":"GHSA-xwhf-g6j5-j5gc","id":"tcs_01M5KGAAKME6F6C5CSG2NX95C5","modified_at":"2023-12-06T01:00:17.667384Z","published_at":"2020-10-21T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-296","https://github.com/tensorflow/tensorflow/pull/42143/commits/3ade2efec2e90c6237de32a19680caaa3ebc2845","https://github.com/tensorflow/tensorflow/issues/42129","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xwhf-g6j5-j5gc"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-296","url":"https://osv.dev/vulnerability/PYSEC-2020-296"}],"summary":"In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel implementation receives it as a C++ `nan` floating point value. Attem"}