-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| tensorflow | pip | < 2.5.3 | 2.5.3 |
| tensorflow | pip | >= 2.6.0, < 2.6.3 | 2.6.3 |
| tensorflow | pip | = 2.7.0 | 2.7.1 |
| tensorflow-cpu | pip | < 2.5.3 | 2.5.3 |
| tensorflow-cpu | pip | >= 2.6.0, < 2.6.3 | 2.6.3 |
| tensorflow-cpu | pip | = 2.7.0 | 2.7.1 |
| tensorflow-gpu | pip | < 2.5.3 | 2.5.3 |
| tensorflow-gpu | pip | >= 2.6.0, < 2.6.3 | 2.6.3 |
| tensorflow-gpu | pip | = 2.7.0 | 2.7.1 |
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability stems from the AssignOp's Compute method where memory management occurs. The original code (pre-patch) contained checks for LHS initialization but omitted equivalent checks for RHS. The security fix (commit ef1d027) explicitly adds an OP_REQUIRES check for rhs.IsInitialized() in this function, confirming this as the vulnerable location. The file path and function are directly referenced in both the vulnerability description and patch commit.
Ongoing coverage of React2Shell