| Package | Affected versions | Patched versions |
|---|---|---|
| tensorflow | ≤ 2.5.0 |
TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.get_file is not intended for untrusted archives
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free