https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T20:09:35.543952+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-tensorflow-2021-35958 BIT-tensorflow-2021-35958 2026-10-12T20:09:35.547906+00:00

Affected: Bitnami: tensorflow

TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.get_file is not intended for untrusted archives

 https://cve.radiocsirt.org/vuln/cnvd-2021-48867 cnvd-2021-48867 2026-10-12T20:09:35.547949+00:00 cnvd-2021-48867 https://cve.radiocsirt.org/vuln/euvd-2026-29277 EUVD-2026-29277 2026-10-12T20:09:35.547966+00:00 EUVD-2026-29277 https://cve.radiocsirt.org/vuln/fkie_cve-2021-35958 fkie_cve-2021-35958 2026-10-12T20:09:35.547984+00:00

TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.get_file is not intended for untrusted archives

 https://cve.radiocsirt.org/vuln/ghsa-4cm9-63x5-55wm GHSA-4cm9-63x5-55wm 2026-10-12T20:09:35.548005+00:00

** DISPUTED ** TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.get_file is not intended for untrusted archives.

 https://cve.radiocsirt.org/vuln/gsd-2021-35958 gsd-2021-35958 2026-10-12T20:09:35.548020+00:00 gsd-2021-35958