Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.7.2 #23

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Security upgrade tensorflow from 1.14.0 to 2.7.2 #23

wants to merge 1 commit into from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • rigl/requirements.txt
⚠️ Warning 
tensorflow 1.14.0 requires protobuf, which is not installed.
tensorflow-metadata 0.22.2 requires protobuf, which is not installed.
tensorflow-datasets 2.1.0 requires protobuf, which is not installed.
tensorboard 1.14.0 requires protobuf, which is not installed.
googleapis-common-protos 1.52.0 requires protobuf, which is not installed.

Vulnerabilities that will be fixed

By pinning:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity
low severity 578/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 3.7		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026781		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
low severity 578/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 3.7		 Integer Overflow or Wraparound
SNYK-PYTHON-TENSORFLOW-3026782		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 688/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.9		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026785		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 561/1000
Why? Recently disclosed, Has a fix available, CVSS 5.5		 Division by zero
SNYK-PYTHON-TENSORFLOW-3026788		 tensorflow:
1.14.0 -> 2.7.2
No No Known Exploit
medium severity 688/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.9		 Improper Input Validation
SNYK-PYTHON-TENSORFLOW-3026791		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 581/1000
Why? Recently disclosed, Has a fix available, CVSS 5.9		 NULL Pointer Dereference
SNYK-PYTHON-TENSORFLOW-3026794		 tensorflow:
1.14.0 -> 2.7.2
No No Known Exploit
medium severity 581/1000
Why? Recently disclosed, Has a fix available, CVSS 5.9		 Improper Input Validation
SNYK-PYTHON-TENSORFLOW-3026797		 tensorflow:
1.14.0 -> 2.7.2
No No Known Exploit
medium severity 541/1000
Why? Recently disclosed, Has a fix available, CVSS 5.1		 NULL Pointer Dereference
SNYK-PYTHON-TENSORFLOW-3026802		 tensorflow:
1.14.0 -> 2.7.2
No No Known Exploit
medium severity 541/1000
Why? Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026803		 tensorflow:
1.14.0 -> 2.7.2
No No Known Exploit
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026808		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026811		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026814		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 541/1000
Why? Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026817		 tensorflow:
1.14.0 -> 2.7.2
No No Known Exploit
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026820		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026823		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026826		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026829		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026832		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026835		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026838		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026841		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026844		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Integer Overflow or Wraparound
SNYK-PYTHON-TENSORFLOW-3026847		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026850		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026853		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026856		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026857		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026862		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026865		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 NULL Pointer Dereference
SNYK-PYTHON-TENSORFLOW-3026868		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Improper Input Validation
SNYK-PYTHON-TENSORFLOW-3026871		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026874		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026877		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026880		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026883		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026886		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026889		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026892		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026895		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026898		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026901		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026905		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026908		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5		 Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-3026911		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026914		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
high severity 706/1000
Why? Recently disclosed, Has a fix available, CVSS 8.4		 Out-of-bounds Write
SNYK-PYTHON-TENSORFLOW-3026917		 tensorflow:
1.14.0 -> 2.7.2
No No Known Exploit
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026926		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026929		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026932		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026935		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026939		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026943		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026946		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026949		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026953		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026956		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 648/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.1		 Denial of Service (DoS)
SNYK-PYTHON-TENSORFLOW-3026959		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
medium severity 613/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 4.4		 NULL Pointer Dereference
SNYK-PYTHON-TENSORFLOW-3026963		 tensorflow:
1.14.0 -> 2.7.2
No Proof of Concept
high severity 636/1000
Why? Recently disclosed, Has a fix available, CVSS 7		 Out-of-bounds Read
SNYK-PYTHON-TENSORFLOW-3026979		 tensorflow:
1.14.0 -> 2.7.2
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Denial of Service (DoS)
🦉 Denial of Service (DoS)
🦉 More lessons are available in Snyk Learn

@snyk-bot
fix: rigl/requirements.txt to reduce vulnerabilities
7237149 
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026781
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026782
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026785
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026788
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026791
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026794
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026797
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026802
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026803
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026808
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026811
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026814
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026817
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026820
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026823
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026826
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026829
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026832
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026835
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026838
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026841
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026844
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026847
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026850
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026853
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026856
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026857
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026862
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026865
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026868
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026871
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026874
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026877
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026880
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026883
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026886
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026889
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026892
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026895
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026898
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026901
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026905
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026908
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026911
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026914
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026917
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026926
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026929
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026932
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026935
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026939
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026943
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026946
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026949
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026953
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026956
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026959
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026963
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3026979
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@snyk-bot