[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1 - #15

Open
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713
Open

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1#15
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • requirements.txt

Vulnerabilities that will be fixed

By pinning:
SeverityPriority Score (*)IssueUpgradeBreaking ChangeExploit Maturity
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912554
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912557
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912560
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912561
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912566
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912569
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912573
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912576
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912579
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912583
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912586
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912589
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912592
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912596
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912600
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912603
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Access of Uninitialized Pointer
SNYK-PYTHON-TENSORFLOW-1912606
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity668/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912609
tensorflow:
1.14.0 -> 2.6.1
NoProof of Concept
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Deserialization of Untrusted Data
SNYK-PYTHON-TENSORFLOW-1912615
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use After Free
SNYK-PYTHON-TENSORFLOW-1912619
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912622
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912625
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912628
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Improper Input Validation
SNYK-PYTHON-TENSORFLOW-1912631
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity616/1000
Why? Recently disclosed, Has a fix available, CVSS 6.6
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912634
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912637
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity726/1000
Why? Recently disclosed, Has a fix available, CVSS 8.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912640
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912643
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Divide By Zero
SNYK-PYTHON-TENSORFLOW-1912646
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912649
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912653
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912656
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912659
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912662
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912665
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912668
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the effected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.


Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912554
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912557
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912560
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912561
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912566
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912569
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912573
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912576
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912579
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912583
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912586
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912589
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912592
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912596
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912600
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912603
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912606
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912609
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912615
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912619
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912622
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912625
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912628
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912631
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912634
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912637
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912640
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912643
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912646
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912649
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912653
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912656
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912659
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912662
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912665
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912668
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Skip to content

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1 - #15

Open
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713
Open

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1#15
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • requirements.txt

Vulnerabilities that will be fixed

By pinning:
SeverityPriority Score (*)IssueUpgradeBreaking ChangeExploit Maturity
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912554
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912557
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912560
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912561
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912566
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912569
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912573
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912576
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912579
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912583
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912586
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912589
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912592
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912596
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912600
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912603
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Access of Uninitialized Pointer
SNYK-PYTHON-TENSORFLOW-1912606
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity668/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912609
tensorflow:
1.14.0 -> 2.6.1
NoProof of Concept
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Deserialization of Untrusted Data
SNYK-PYTHON-TENSORFLOW-1912615
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use After Free
SNYK-PYTHON-TENSORFLOW-1912619
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912622
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912625
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912628
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Improper Input Validation
SNYK-PYTHON-TENSORFLOW-1912631
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity616/1000
Why? Recently disclosed, Has a fix available, CVSS 6.6
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912634
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912637
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity726/1000
Why? Recently disclosed, Has a fix available, CVSS 8.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912640
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912643
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Divide By Zero
SNYK-PYTHON-TENSORFLOW-1912646
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912649
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912653
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912656
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912659
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912662
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912665
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912668
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the effected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.


Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912554
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912557
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912560
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912561
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912566
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912569
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912573
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912576
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912579
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912583
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912586
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912589
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912592
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912596
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912600
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912603
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912606
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912609
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912615
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912619
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912622
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912625
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912628
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912631
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912634
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912637
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912640
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912643
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912646
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912649
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912653
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912656
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912659
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912662
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912665
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912668
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix"); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1 - #15

Open
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713
Open

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1#15
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • requirements.txt

Vulnerabilities that will be fixed

By pinning:
SeverityPriority Score (*)IssueUpgradeBreaking ChangeExploit Maturity
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912554
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912557
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912560
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912561
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912566
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912569
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912573
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912576
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912579
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912583
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912586
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912589
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912592
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912596
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912600
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912603
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Access of Uninitialized Pointer
SNYK-PYTHON-TENSORFLOW-1912606
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity668/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912609
tensorflow:
1.14.0 -> 2.6.1
NoProof of Concept
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Deserialization of Untrusted Data
SNYK-PYTHON-TENSORFLOW-1912615
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use After Free
SNYK-PYTHON-TENSORFLOW-1912619
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912622
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912625
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912628
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Improper Input Validation
SNYK-PYTHON-TENSORFLOW-1912631
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity616/1000
Why? Recently disclosed, Has a fix available, CVSS 6.6
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912634
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912637
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity726/1000
Why? Recently disclosed, Has a fix available, CVSS 8.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912640
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912643
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Divide By Zero
SNYK-PYTHON-TENSORFLOW-1912646
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912649
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912653
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912656
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912659
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912662
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912665
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912668
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the effected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.


Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912554
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912557
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912560
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912561
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912566
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912569
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912573
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912576
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912579
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912583
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912586
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912589
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912592
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912596
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912600
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912603
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912606
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912609
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912615
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912619
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912622
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912625
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912628
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912631
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912634
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912637
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912640
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912643
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912646
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912649
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912653
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912656
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912659
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912662
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912665
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912668
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms"); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1 - #15

Open
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713
Open

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1#15
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • requirements.txt

Vulnerabilities that will be fixed

By pinning:
SeverityPriority Score (*)IssueUpgradeBreaking ChangeExploit Maturity
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912554
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912557
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912560
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912561
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912566
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912569
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912573
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912576
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912579
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912583
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912586
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912589
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912592
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912596
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912600
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912603
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Access of Uninitialized Pointer
SNYK-PYTHON-TENSORFLOW-1912606
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity668/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912609
tensorflow:
1.14.0 -> 2.6.1
NoProof of Concept
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Deserialization of Untrusted Data
SNYK-PYTHON-TENSORFLOW-1912615
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use After Free
SNYK-PYTHON-TENSORFLOW-1912619
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912622
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912625
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912628
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Improper Input Validation
SNYK-PYTHON-TENSORFLOW-1912631
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity616/1000
Why? Recently disclosed, Has a fix available, CVSS 6.6
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912634
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912637
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity726/1000
Why? Recently disclosed, Has a fix available, CVSS 8.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912640
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912643
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Divide By Zero
SNYK-PYTHON-TENSORFLOW-1912646
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912649
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912653
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912656
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912659
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912662
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912665
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912668
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the effected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.


Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912554
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912557
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912560
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912561
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912566
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912569
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912573
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912576
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912579
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912583
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912586
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912589
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912592
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912596
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912600
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912603
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912606
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912609
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912615
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912619
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912622
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912625
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912628
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912631
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912634
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912637
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912640
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912643
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912646
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912649
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912653
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912656
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912659
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912662
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912665
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912668
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links"); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + '
Skip to content

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1 - #15

Open
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713
Open

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1#15
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • requirements.txt

Vulnerabilities that will be fixed

By pinning:
SeverityPriority Score (*)IssueUpgradeBreaking ChangeExploit Maturity
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912554
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912557
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912560
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912561
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912566
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912569
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912573
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912576
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912579
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912583
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912586
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912589
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912592
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912596
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912600
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912603
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Access of Uninitialized Pointer
SNYK-PYTHON-TENSORFLOW-1912606
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity668/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912609
tensorflow:
1.14.0 -> 2.6.1
NoProof of Concept
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Deserialization of Untrusted Data
SNYK-PYTHON-TENSORFLOW-1912615
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use After Free
SNYK-PYTHON-TENSORFLOW-1912619
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912622
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912625
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912628
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Improper Input Validation
SNYK-PYTHON-TENSORFLOW-1912631
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity616/1000
Why? Recently disclosed, Has a fix available, CVSS 6.6
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912634
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912637
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity726/1000
Why? Recently disclosed, Has a fix available, CVSS 8.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912640
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912643
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Divide By Zero
SNYK-PYTHON-TENSORFLOW-1912646
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912649
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912653
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912656
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912659
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912662
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912665
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912668
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the effected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.


Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912554
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912557
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912560
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912561
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912566
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912569
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912573
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912576
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912579
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912583
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912586
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912589
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912592
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912596
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912600
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912603
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912606
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912609
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912615
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912619
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912622
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912625
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912628
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912631
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912634
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912637
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912640
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912643
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912646
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912649
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912653
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912656
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912659
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912662
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912665
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912668
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default"); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1 - #15

Open
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713
Open

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1#15
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • requirements.txt

Vulnerabilities that will be fixed

By pinning:
SeverityPriority Score (*)IssueUpgradeBreaking ChangeExploit Maturity
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912554
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912557
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912560
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912561
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912566
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912569
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912573
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912576
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912579
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912583
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912586
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912589
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912592
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912596
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912600
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912603
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Access of Uninitialized Pointer
SNYK-PYTHON-TENSORFLOW-1912606
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity668/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912609
tensorflow:
1.14.0 -> 2.6.1
NoProof of Concept
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Deserialization of Untrusted Data
SNYK-PYTHON-TENSORFLOW-1912615
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use After Free
SNYK-PYTHON-TENSORFLOW-1912619
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912622
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912625
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912628
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Improper Input Validation
SNYK-PYTHON-TENSORFLOW-1912631
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity616/1000
Why? Recently disclosed, Has a fix available, CVSS 6.6
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912634
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912637
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity726/1000
Why? Recently disclosed, Has a fix available, CVSS 8.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912640
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912643
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Divide By Zero
SNYK-PYTHON-TENSORFLOW-1912646
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912649
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912653
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912656
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912659
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912662
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912665
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912668
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the effected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.


Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912554
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912557
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912560
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912561
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912566
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912569
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912573
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912576
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912579
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912583
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912586
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912589
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912592
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912596
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912600
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912603
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912606
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912609
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912615
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912619
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912622
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912625
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912628
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912631
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912634
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912637
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912640
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912643
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912646
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912649
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912653
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912656
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912659
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912662
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912665
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912668
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers"); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1 - #15

Open
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713
Open

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1#15
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • requirements.txt

Vulnerabilities that will be fixed

By pinning:
SeverityPriority Score (*)IssueUpgradeBreaking ChangeExploit Maturity
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912554
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912557
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912560
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912561
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912566
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912569
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912573
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912576
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912579
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912583
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912586
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912589
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912592
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912596
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912600
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912603
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Access of Uninitialized Pointer
SNYK-PYTHON-TENSORFLOW-1912606
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity668/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912609
tensorflow:
1.14.0 -> 2.6.1
NoProof of Concept
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Deserialization of Untrusted Data
SNYK-PYTHON-TENSORFLOW-1912615
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use After Free
SNYK-PYTHON-TENSORFLOW-1912619
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912622
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912625
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912628
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Improper Input Validation
SNYK-PYTHON-TENSORFLOW-1912631
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity616/1000
Why? Recently disclosed, Has a fix available, CVSS 6.6
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912634
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912637
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity726/1000
Why? Recently disclosed, Has a fix available, CVSS 8.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912640
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912643
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Divide By Zero
SNYK-PYTHON-TENSORFLOW-1912646
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912649
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912653
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912656
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912659
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912662
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912665
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912668
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the effected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.


Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912554
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912557
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912560
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912561
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912566
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912569
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912573
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912576
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912579
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912583
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912586
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912589
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912592
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912596
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912600
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912603
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912606
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912609
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912615
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912619
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912622
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912625
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912628
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912631
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912634
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912637
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912640
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912643
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912646
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912649
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912653
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912656
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912659
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912662
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912665
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912668
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode"); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
Skip to content

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1 - #15

Open
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713
Open

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.6.1#15
snyk-bot wants to merge 1 commit into
masterfrom
snyk-fix-d0fcbe82d33c0c1ece9c67a46d0ec713

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • requirements.txt

Vulnerabilities that will be fixed

By pinning:
SeverityPriority Score (*)IssueUpgradeBreaking ChangeExploit Maturity
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912554
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912557
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912560
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912561
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912566
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912569
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912573
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912576
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912579
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912583
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912586
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912589
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-Bounds
SNYK-PYTHON-TENSORFLOW-1912592
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912596
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity641/1000
Why? Recently disclosed, Has a fix available, CVSS 7.1
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912600
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912603
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Access of Uninitialized Pointer
SNYK-PYTHON-TENSORFLOW-1912606
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity668/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912609
tensorflow:
1.14.0 -> 2.6.1
NoProof of Concept
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Deserialization of Untrusted Data
SNYK-PYTHON-TENSORFLOW-1912615
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Use After Free
SNYK-PYTHON-TENSORFLOW-1912619
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Heap-based Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912622
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity676/1000
Why? Recently disclosed, Has a fix available, CVSS 7.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912625
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912628
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Improper Input Validation
SNYK-PYTHON-TENSORFLOW-1912631
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity616/1000
Why? Recently disclosed, Has a fix available, CVSS 6.6
Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-1912634
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912637
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity726/1000
Why? Recently disclosed, Has a fix available, CVSS 8.8
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912640
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Use of Uninitialized Variable
SNYK-PYTHON-TENSORFLOW-1912643
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Divide By Zero
SNYK-PYTHON-TENSORFLOW-1912646
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
medium severity561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5
Buffer Overflow
SNYK-PYTHON-TENSORFLOW-1912649
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912653
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912656
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Remote Code Execution (RCE)
SNYK-PYTHON-TENSORFLOW-1912659
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912662
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912665
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit
high severity636/1000
Why? Recently disclosed, Has a fix available, CVSS 7
Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-1912668
tensorflow:
1.14.0 -> 2.6.1
NoNo Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the effected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.


Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912554
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912557
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912560
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912561
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912566
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912569
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912573
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912576
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912579
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912583
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912586
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912589
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912592
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912596
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912600
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912603
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912606
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912609
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912615
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912619
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912622
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912625
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912628
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912631
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912634
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912637
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912640
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912643
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912646
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912649
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912653
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912656
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912659
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912662
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912665
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1912668
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@snyk-bot