Skip to content

[Snyk] Security upgrade tensorflow/tensorflow from 2.11.0-gpu to 2.21.0rc0-gpu #38

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
nicholas-lockhart wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Security upgrade tensorflow/tensorflow from 2.11.0-gpu to 2.21.0rc0-gpu #38

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion finetune/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM tensorflow/tensorflow:2.11.0-gpu
FROM tensorflow/tensorflow:2.21.0rc0-gpu
Copy link

@cursor cursor bot Feb 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tensorflow-addons incompatible with TensorFlow 2.21

High Severity

Upgrading the base image to TensorFlow 2.21.0rc0 breaks the pip3 install -U tensorflow-addons step on line 10. tensorflow-addons reached end-of-life in May 2024, with its last release (0.23.0) only supporting up to approximately TensorFlow 2.15. This will cause a Docker build failure or runtime incompatibility since there is no tensorflow-addons version compatible with TF 2.21.

Additional Locations (1)

Fix in Cursor Fix in Web

Copy link

@cursor cursor bot Feb 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Using release candidate image in production Dockerfile

Medium Severity

The base image tensorflow/tensorflow:2.21.0rc0-gpu is a release candidate, not a stable release. RC versions may contain unresolved bugs, undergo API changes before the final release, and are not intended for production use. This could lead to unexpected behavior or require another image upgrade soon after.

Fix in Cursor Fix in Web


# Note - this is not a complete finetune image and custom op build will fail
RUN apt-get update && apt install -y git
Expand Down
Loading