{"action":"Upgrade tensorflow-cpu to 2.8.4 or later.","affected":[{"fixed":"2.8.4","introduced":"0"},{"fixed":"2.9.3","introduced":"2.9.0"},{"fixed":"2.10.1","introduced":"2.10.0"}],"component":"tensorflow-cpu","cve_ids":["CVE-2022-41880"],"ecosystem":"PyPI","epss":0.0041,"exploited":false,"fixed_versions":["2.8.4","2.9.3","2.10.1"],"ghsa_id":"GHSA-8w5g-3wcv-9g2j","id":"tcs_01M5KH4HGD3JPQYZSPY3DA7FZ5","modified_at":"2026-07-13T16:43:00.919386427Z","published_at":"2026-07-13T14:19:56.592199Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3298","https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8w5g-3wcv-9g2j","https://nvd.nist.gov/vuln/detail/CVE-2022-41880","https://github.com/tensorflow/tensorflow/commit/b389f5c944cadfdfe599b3f1e4026e036f30d2d4","https://github.com/tensorflow/tensorflow","https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/candidate_sampler_ops.cc","https://pypi.org/project/tensorflow-cpu","https://github.com/advisories/GHSA-8w5g-3wcv-9g2j"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-3298","url":"https://osv.dev/vulnerability/PYSEC-2026-3298"}],"summary":"Tensorflow vulnerable to Out-of-Bounds Read"}