Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.4

TensorFlow GPU Jupyter may allow unauthorized code execution

published 2 days ago
Summary

The TensorFlow GPU Jupyter package in version 2.18.1‑r0 contains a flaw that could let an attacker run code on your system. Updating to a newer release removes the risk. Apply the latest version as soon as possible.

What to do
  • Update cleanstart tensorflow-gpu-jupyter to version 2.18.1-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart tensorflow-gpu-jupyter < 2.18.1-r0
Fix: upgrade to 2.18.1-r0
Original advisory text
Security fix for GHSA-pppj-hq3g-57pj applied in: tensorflow-gpu-jupyter 2.18.1-r0
Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.4 Critical
Timeline
Published17 Oct 2026
Updated17 Oct 2026
First seen17 Oct 2026
Sources
CLEANSTART-2026-JZ86635 · OSV
Track software like this
Free during beta