漏洞公告

Request injection in Spring Cloud Gateway

Incomplete validation in boosted trees code

Crash in `tf.math.segment_*` operations

Crash in `max_pool3d` when size argument is 0 or negative

Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes

Overflow/crash in `tf.tile` when tiling tensor is large

Overflow/crash in `tf.image.resize` when size is large

Incomplete validation in `tf.summary.create_file_writer`

Unitialized access in `EinsumHelper::ParseEquation`

Overflow/crash in `tf.range`

Missing validation during checkpoint loading

Segfault while copying constant resource tensor

Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops

Incomplete validation of shapes in multiple TF ops

FPE in `ParallelConcat`

FPE in convolutions with zero size filters

Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`

Heap OOB in shape inference for `QuantizeV2`

Heap OOB read in `tf.ragged.cross`

Deadlock in mutually recursive `tf.function` objects

Reference binding to `nullptr` in `tf.ragged.cross`

Null pointer exception in `DeserializeSparse`

Heap buffer overflow in `Transpose`