Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

tensorflow/datasets

              master @ 5b4cb61
            

Fixes

CVEs

MEDIUM

Peak severity

Highlights

Insecure Transport: 2 prior fixes. Scrutinize any change in this area.

tensorflow_datasets/audio/speech_commands.py: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Insecure Transport: The use of cleartext HTTP for retrieving dataset metadata and download URLs from Google Cloud Storage utilities exposes clients to potential MITM tampering, allowing attackers to manipulate metadata or redirect download targets.

Insecure Transport: Downloading speech command test dataset assets over unencrypted HTTP permits network-level adversaries to intercept or alter the audio dataset files during transit, compromising downstream model training and evaluation.