-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIOngoing coverage of React2Shell
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability stems from the hash function implementation in TensorKey's AbslHashValue. The commit diff shows the original code iterated over AllocatedBytes() via tensor.data(), which is unsafe for non-contiguous types like tstring. The CVE description explicitly identifies this function as the root cause, and the patch replaces this logic with type-aware handling mirroring the == operator.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| tensorflow | pip | >= 2.8.0, < 2.8.1 | 2.8.1 |
| tensorflow-cpu | pip | >= 2.8.0, < 2.8.1 | 2.8.1 |
| tensorflow-gpu | pip | >= 2.8.0, < 2.8.1 | 2.8.1 |