37 matches found
NewStart CGSL MAIN 7.02 : pytorch Vulnerability (NS-SA-2026-0105)
The remote NewStart CGSL host, running version MAIN 7.02, has pytorch packages installed that are affected by a vulnerability: - PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a...
aistructdynsolve (>=1.0.0, <=1.2.0), anoseg (0.0.2) +81 more potentially affected by CVE-2026-24747 via pytorch (1.0.2)
pytorch PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch and may be impacted: - aistructdynsolve =1.0.0, =0.3.0.1, =1.1.0, =1.1.1 and more Source cves: CVE-2026-24747 Source advisory: OSV:PYSEC-2026-1856...
Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak
Summary A security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. Python is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fixes...
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses torch-2.8.0-cp310-none-macosx_11_0_arm64.whl which is vulnerable to CVE-2026-24747
Summary IBM Maximo Application Suite - Visual Inspection component uses torch-2.8.0-cp310-none-macosx110arm64.whl which is vulnerable to CVE-2026-24747, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-24747 DESCRIPTION:...
CVE-2026-24747
creationtimestamp| type| source ---|---|--- 2026-01-27 23:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdguifixce25 2026-01-27 23:02:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgujasel22x 2026-08-24 15:42:13+00:00| seen|...
adaseq (>=0.4.0, <=0.6.3), aipalette-nlp (>=0.0.9, <=0.1.0) +209 more potentially affected by CVE-2026-24747 via torch (1.12.1)
torch PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - adaseq =0.4.0, =0.0.9, =1.0.0, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.1.1 and more Source cves: CVE-2026-24747 Source advisory:...
ae-toolbox (0.2.0), aihwkit (>=0.7.0, <=0.7.1) +60 more potentially affected by CVE-2026-24747 via torch (1.13.0)
torch PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - ae-toolbox 0.2.0 - aihwkit =0.7.0, =0.1.0, =1.0.14, =1.0.1, =0.1.15, =0.0.9, =0.3.0, =0.1.0, =0.1.8rc3, =0.1.8rc4 and more Source cves: CVE-2026-2474...
ai-traineree (0.0.12), alphad3m (>=0.10.0.dev0, <=0.10.0.dev1) +40 more potentially affected by CVE-2026-24747 via torch (1.7.0)
torch PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - ai-traineree 0.0.12 - alphad3m =0.10.0.dev0, =0.0.1, =0.0.4, =0.2.3, =0.0.1, =2022.3.22, =0.0.0, =0.2.0a5, =0.0.1, =0.3.0 and more Source cves:...
aaa-ml-datasets-course (1.0.0), aait (>=0.0.4.80, <=2.0.2) +3007 more potentially affected by CVE-2026-24747 via torch (>=2.0.0, <=2.9.1)
torch PYPI version =2.0.0, =0.0.4.80, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =1.14.0.post1, =0.1.0, =1.0.0.3, =1.0.0.5 and more Source cves: CVE-2026-24747 Source advisory: OSV:PYSEC-2026-2286...
4996 (>=0.1.0, <=0.1.1), ablation (0.1.0) +30 more potentially affected by CVE-2026-24747 via torch (1.10.1)
torch PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - 4996 =0.1.0, =0.1.13, =2.0.0rc1, =0.0.1, =0.3.3, =0.1.0, =0.5.0, =0.6.0 and more Source cves: CVE-2026-24747 Source advisory: OSV:PYSEC-2026-2286...
3d-rcnet (>=0.1.0, <=0.2.3), alignn (>=2022.11.6, <=2023.1.10) +58 more potentially affected by CVE-2026-24747 via torch (1.12.0)
torch PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - 3d-rcnet =0.1.0, =2022.11.6, =2022.10.23, =1.44.0, =0.1.3, =3.6.0, =0.1.1, =0.0.5, =0.1.0, =1.5.0, =1.2.0, =0.0.16, =0.2.4, =2.3.1, =2.3.9 and more...
afrotranslate (>=0.0.1, <=0.0.6), ai-traineree (0.0.13) +35 more potentially affected by CVE-2026-24747 via torch (1.8.0)
torch PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - afrotranslate =0.0.1, =1.4.0, =0.7.5, =0.2.0, =0.0.7, =0.0.1, =0.1.0, =4.0.0, =0.0.1, =1.0.0, =1.2.0 - handobjectacb 0.1.3 - hummingbird-ml 0.2.2 and...
aihwkit (>=0.3.0, <=0.6.0), aiqc (>=2.1.0, <=7.1.5) +133 more potentially affected by CVE-2026-24747 via torch (1.8.1)
torch PYPI version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aihwkit =0.3.0, =2.1.0, =2.2.0, =2.2.0, =0.2.2, =0.0.4, =0.7.0, =1.34.0, =0.0.1, =0.1.0, =3.0.0, =3.2.1 and more Source cves: CVE-2026-24747 Source...
alfworld (>=0.2.2rc1, <=0.2.2), atacworks (>=0.3.0, <=0.3.3) +31 more potentially affected by CVE-2026-24747 via torch (1.2.0)
torch PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - alfworld =0.2.2rc1, =0.3.0, =0.0.2.dev0, =3.0.0b34, =0.5.0, =0.1.0, =0.1.6, =0.0.2, =0.1.1.dev0, =0.1.1, =0.1.4 - mars-gym 0.1.0 - natas 1.0.6 -...
aum (>=1.0.0, <=1.0.1), blitz-bayesian-pytorch (0.2.0) +41 more potentially affected by CVE-2026-24747 via torch (1.3.1)
torch PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aum =1.0.0, =0.3.0, =0.6.1, =0.1.0rc3, =0.0.1, =0.3.2, =0.0.1, =0.1.2, =0.0.6, =0.0.8 and more Source cves: CVE-2026-24747 Source advisory:...
ai-projects (>=0.0.1, <=0.0.4), allencv (>=0.1.2, <=0.1.3) +191 more potentially affected by CVE-2026-24747 via torch (1.7.1)
torch PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - ai-projects =0.0.1, =0.1.2, =1.2.0, =0.0.3, =1.2.0, =1.37.0, =0.0.2, =1.0.0, =0.6.6, =0.2.0, =0.2.1 - bento-tools 0.1.0 and more Source cves:...
agent-smith (0.1.1), aixlab-cn-pre (0.1.0) +89 more potentially affected by CVE-2026-24747 via torch (1.9.0)
torch PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - agent-smith 0.1.1 - aixlab-cn-pre 0.1.0 - audacitorch =0.0.1, =0.1.2, =1.0.2, =1.35.0, =0.0.1rc19, =0.2.0.dev20220120, =0.2.1 and more Source cves:...
CVE-2026-24747 PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files
PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to...
aistructdynsolve (>=1.0.0, <=1.2.0), anoseg (0.0.2) +81 more potentially affected by CVE-2026-24747 via pytorch (1.0.2)
pytorch PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch and may be impacted: - aistructdynsolve =1.0.0, =0.3.0.1, =1.1.0, =1.1.1 and more Source cves: CVE-2026-24747 Source advisory: OSV:GHSA-63CW-57P8-FM3P...
