Tagged “pip”
CVEs tagged pip, newest first.
5541 CVEsRSS
CVE-2021-29596Low· 2.5Division by zero in TFLite's implementation of `EmbeddingLookup`
Division by zero in TFLite's implementation of `EmbeddingLookup`
CVE-2021-29526Low· 2.5Division by 0 in `Conv2D`
Division by 0 in `Conv2D`
CVE-2021-29568Low· 2.5Reference binding to null in `ParameterizedTruncatedNormal`
Reference binding to null in `ParameterizedTruncatedNormal`
CVE-2021-29616Low· 2.5Null dereference in Grappler's `TrySimplify`
Null dereference in Grappler's `TrySimplify`
CVE-2021-29542Low· 2.5Heap buffer overflow in `StringNGrams`
Heap buffer overflow in `StringNGrams`
CVE-2021-29547Low· 2.5Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization`
Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization`
CVE-2021-29513Low· 2.5Type confusion during tensor casts lead to dereferencing null pointers
Type confusion during tensor casts lead to dereferencing null pointers
CVE-2021-29512Low· 2.5Heap buffer overflow in `RaggedBinCount`
Heap buffer overflow in `RaggedBinCount`
CVE-2021-29589Low· 2.5Division by zero in TFLite's implementation of `GatherNd`
Division by zero in TFLite's implementation of `GatherNd`
CVE-2021-29531Low· 2.5CHECK-fail in tf.raw_ops.EncodePng
CHECK-fail in tf.raw_ops.EncodePng
CVE-2021-29594Low· 2.5Division by zero in TFLite's convolution code
Division by zero in TFLite's convolution code
CVE-2021-29569Low· 2.5Heap out of bounds read in `RequantizationRange`
Heap out of bounds read in `RequantizationRange`
CVE-2021-29533Low· 2.5CHECK-fail in DrawBoundingBoxes
CHECK-fail in DrawBoundingBoxes
CVE-2021-29562Low· 2.5CHECK-fail in `tf.raw_ops.IRFFT`
CHECK-fail in `tf.raw_ops.IRFFT`
CVE-2021-29612Low· 3.6Heap buffer overflow in `BandedTriangularSolve`
Heap buffer overflow in `BandedTriangularSolve`
CVE-2021-29536Low· 2.5Heap buffer overflow in `QuantizedReshape`
Heap buffer overflow in `QuantizedReshape`
CVE-2021-29523Low· 2.5CHECK-fail in AddManySparseToTensorsMap
CHECK-fail in AddManySparseToTensorsMap
CVE-2021-29586Low· 2.5Division by zero in optimized pooling implementations in TFLite
Division by zero in optimized pooling implementations in TFLite
CVE-2021-29590Low· 2.5Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`
Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`
CVE-2021-29471Low· 3.7Denial of service attack via push rule patterns in matrix-synapse
Denial of service attack via push rule patterns in matrix-synapse
CVE-2021-29510Low· 3.3Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
CVE-2021-21419Medium· 5.3Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet
Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet
CVE-2020-25032High· 7.5Flask-Cors Directory Traversal vulnerability
Flask-Cors Directory Traversal vulnerability
GHSA-qrmm-w4v4-q7f8HighUnauthorized access through URL manipulation
Unauthorized access through URL manipulation
GHSA-jgpv-4h4c-xhw3High· 7.5Duplicate Advisory: Uncontrolled Resource Consumption in pillow
Duplicate Advisory: Uncontrolled Resource Consumption in pillow
CVE-2021-29434Medium· 6.1Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
CVE-2021-29421High· 7.5Improper Restriction of XML External Entity Reference in pikepdf
Improper Restriction of XML External Entity Reference in pikepdf
CVE-2021-29430High· 7.5Sydent vulnerable to denial of service attack via memory exhaustion
Sydent vulnerable to denial of service attack via memory exhaustion
CVE-2021-29432Medium· 5.3Malicious users could abuse Sydent to control the content of invitation emails
Malicious users could abuse Sydent to control the content of invitation emails
CVE-2021-29431High· 7.7SSRF in Sydent due to missing validation of hostnames
SSRF in Sydent due to missing validation of hostnames