Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.
This project contains known security vulnerabilities. Find detailed information at the bottom.
tensorflow(8 total, 6 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| byteorder | ^1.3.2 | 1.5.0 | up to date |
| crc | ^1.8.1 | 3.4.0 | out of date |
| half | ^1.3.0 | 2.7.1 | out of date |
| libc | ^0.2.62 | 0.2.191 | up to date |
| num-complex | ^0.2.3 | 0.4.6 | out of date |
| protobuf ⚠️ | =2.8.0 | 3.7.2 | insecure |
| tensorflow-internal-macros | =0.0.1 | 0.0.3 | out of date |
| tensorflow-sys | ^0.18.0 | 0.24.0 | out of date |
(1 total, 1 outdated)
| Crate | Required | Latest | Status |
|---|---|---|---|
| random | ^0.12.2 | 0.14.1 | out of date |
protobuf: Crash due to uncontrolled recursion in protobuf crateAffected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.