Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak

Summary A security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. Python is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fixes...

Security Bulletin: IBM Maximo Application suite Visual Inspection Component uses pytorch v2.8.0 which is vulnerable to multiple CVEs CVE-2025-55552, CVE-2025-55551, CVE-2025-3001.

Summary IBM Maximo Application suite Visual Inspection Component uses pytorch v2.8.0 which is vulnerable to multiple CVEs CVE-2025-55552, CVE-2025-55551, CVE-2025-3001.This Bulletine contains information of the vulerable product version and it's remediation. Vulnerability Details...

CVE-2025-3001 affecting package pytorch for versions less than 2.2.2-10

CVE-2025-3001 affecting package pytorch for versions less than 2.2.2-10. A patched version of the package is available...

adaseq (>=0.4.0, <=0.6.3), aipalette-nlp (>=0.0.9, <=0.1.0) +208 more potentially affected by CVE-2025-3001 via torch (1.12.1)

torch PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - adaseq =0.4.0, =0.0.9, =1.0.0, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.1.1 and more Source cves: CVE-2025-3001 Source advisory:...

ai-traineree (0.0.12), alphad3m (>=0.10.0.dev0, <=0.10.0.dev1) +40 more potentially affected by CVE-2025-3001 via torch (1.7.0)

torch PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - ai-traineree 0.0.12 - alphad3m =0.10.0.dev0, =0.0.1, =0.0.4, =0.2.3, =0.0.1, =2022.3.22, =0.0.0, =0.2.0a5, =0.0.1, =0.3.0 and more Source cves:...

ai-projects (>=0.0.1, <=0.0.4), allencv (>=0.1.2, <=0.1.3) +191 more potentially affected by CVE-2025-3001 via torch (1.7.1)

torch PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - ai-projects =0.0.1, =0.1.2, =1.2.0, =0.0.3, =1.2.0, =1.37.0, =0.0.2, =1.0.0, =0.6.6, =0.2.0, =0.2.1 - bento-tools 0.1.0 and more Source cves:...

allennlp (>=1.0.0.dev20200427, <=1.0.0rc4.dev20200501), allennlp-models (1.0.0rc3) +42 more potentially affected by CVE-2025-3001 via torch (1.5.0)

torch PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - allennlp =1.0.0.dev20200427, =0.0.1, =0.0.2, =0.0.9, =0.0.14, =0.1.7, =0.0.6, =0.0.6, =0.0.1, =0.0.1, =0.0.3, =0.0.4 and more Source cves: CVE-2025-30...

adafmnoisereducer (1.0.2), allennlp (>=1.1.0rc2, <=1.2.0rc1) +90 more potentially affected by CVE-2025-3001 via torch (1.6.0)

torch PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - adafmnoisereducer 1.0.2 - allennlp =1.1.0rc2, =1.1.0rc2, =0.1.1.dev1, =1.0.1, =0.2.1, =0.0.1, =0.0.2.5, =0.2.4, =1.4.2, =0.0.5, =0.1.0, =0.0.1, =0.0.2...

4996 (>=0.1.0, <=0.1.1), ablation (0.1.0) +30 more potentially affected by CVE-2025-3001 via torch (1.10.1)

torch PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - 4996 =0.1.0, =0.1.13, =2.0.0rc1, =0.0.1, =0.3.3, =0.1.0, =0.5.0, =0.6.0 and more Source cves: CVE-2025-3001 Source advisory: OSV:GHSA-QFHQ-4F3W-5FPH...

adaptnlp (>=0.3.6, <=0.3.7), adbdgl-adapter (>=1.0.0, <=1.0.2) +44 more potentially affected by CVE-2025-3001 via torch (1.10.0)

torch PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - adaptnlp =0.3.6, =1.0.0, =0.0.1, =0.0.5, =1.0.0, =1.38.1, =0.2.1, =0.0.3.post3, =0.1.0, =0.0.48, =0.0.59 and more Source cves: CVE-2025-3001 Source...

aihwkit (>=0.3.0, <=0.6.0), aiqc (>=2.1.0, <=7.1.5) +133 more potentially affected by CVE-2025-3001 via torch (1.8.1)

torch PYPI version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aihwkit =0.3.0, =2.1.0, =2.2.0, =2.2.0, =0.2.2, =0.0.4, =0.7.0, =1.34.0, =0.0.1, =0.1.0, =3.0.0, =3.2.1 and more Source cves: CVE-2025-3001 Source...

azureml-designer-pytorch-modules (>=0.0.1, <=0.0.12), deberta (0.1.4) +10 more potentially affected by CVE-2025-3001 via torch (1.3.0)

torch PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - azureml-designer-pytorch-modules =0.0.1, =0.0.3, =1.3.0, =0.1.0, =0.1.0, =0.2.0a2, =0.1.0, =0.1.1 Source cves: CVE-2025-3001 Source advisory:...

aaa-ml-datasets-course (1.0.0), aait (>=0.0.4.80, <=2.0.2) +2998 more potentially affected by CVE-2025-3001 via torch (>=2.0.0, <=2.9.1)

torch PYPI version =2.0.0, =0.0.4.80, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =1.14.0.post1, =0.1.0, =1.0.0.3, =1.0.0.5 and more Source cves: CVE-2025-3001 Source advisory: GHSA-QFHQ-4F3W-5FPH...

abdothebest (>=0.7.4, <=0.9.9), adafdr (0.1.8) +116 more potentially affected by CVE-2025-3001 via torch (1.4.0)

torch PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - abdothebest =0.7.4, =0.9.1.dev20200302, =1.2.0, =0.1.4, =0.1.1, =0.0.5, =1.0.0, =0.2.3, =0.2.0, =0.2.3 and more Source cves: CVE-2025-3001 Source...

aum (>=1.0.0, <=1.0.1), blitz-bayesian-pytorch (0.2.0) +41 more potentially affected by CVE-2025-3001 via torch (1.3.1)

torch PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aum =1.0.0, =0.3.0, =0.6.1, =0.1.0rc3, =0.0.1, =0.3.2, =0.0.1, =0.1.2, =0.0.6, =0.0.8 and more Source cves: CVE-2025-3001 Source advisory:...

adaswarm (>=0.0.1, <=0.0.2), allennlp (>=2.8.0, <=2.9.1) +81 more potentially affected by CVE-2025-3001 via torch (1.10.2)

torch PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - adaswarm =0.0.1, =2.8.0, =2.8.0, =0.1.0, =0.2.1b20210731, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.40.0, =0.1.0, =0.1.2, =0.2.8 -...

3d-rcnet (>=0.1.0, <=0.2.3), alignn (>=2022.11.6, <=2023.1.10) +58 more potentially affected by CVE-2025-3001 via torch (1.12.0)

torch PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - 3d-rcnet =0.1.0, =2022.11.6, =2022.10.23, =1.44.0, =0.1.3, =3.6.0, =0.1.1, =0.0.5, =0.1.0, =1.5.0, =1.2.0, =0.0.16, =0.2.4, =2.3.1, =2.3.9 and more...

dleamse (>=0.2.1, <=0.3.6), gcgc (>=0.2.3, <=0.2.4) +9 more potentially affected by CVE-2025-3001 via torch (1.0.0)

torch PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - dleamse =0.2.1, =0.2.3, =0.3.1, =0.0.1.0, =0.2.3.1, =0.1.0a1, =0.1.0, =0.1.42 Source cves: CVE-2025-3001 Source advisory: OSV:GHSA-QFHQ-4F3W-5FPH...

aima (2023.2.4), aine-drl (0.1.1) +174 more potentially affected by CVE-2025-3001 via torch (1.11.0)

torch PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aima 2023.2.4 - aine-drl 0.1.1 - allennlp =2.9.2, =2.9.3, =0.1.0, =0.1.2, =1.0.0, =0.1.1, =0.4.3b20220621, =0.4.3b20220621, =0.4.3b20220621,...

AZL-73178 CVE-2025-3001 affecting package pytorch for versions less than 2.0.0-12

A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstmcell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...