Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1x8664.whl Vulnerability Details CVEID:CVE-2025-2148 DESCRIPTION: A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this...

Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1_x86_64.whl

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in torch-2.6.0-cp313-cp313-manylinux1x8664.whl Vulnerability Details CVEID:CVE-2025-2148 DESCRIPTION: A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this...

Linux Distros Unpatched Vulnerability : CVE-2025-2149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnqSigmoid of the component Quantized...

CVE-2025-2149

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnqSigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zeropoint leads to improper initialization. The attack needs to be approached...

4996 (>=0.1.0, <=0.1.1), ablation (0.1.0) +30 more potentially affected by CVE-2025-2149 via torch (1.10.1)

torch PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - 4996 =0.1.0, =0.1.13, =2.0.0rc1, =0.0.1, =0.3.3, =0.1.0, =0.5.0, =0.6.0 and more Source cves: CVE-2025-2149 Source advisory: OSV:GHSA-X3GM-94WQ-G975...

azureml-designer-pytorch-modules (>=0.0.1, <=0.0.12), deberta (0.1.4) +10 more potentially affected by CVE-2025-2149 via torch (1.3.0)

torch PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - azureml-designer-pytorch-modules =0.0.1, =0.0.3, =1.3.0, =0.1.0, =0.1.0, =0.2.0a2, =0.1.0, =0.1.1 Source cves: CVE-2025-2149 Source advisory:...

lightwood (>=0.6.6, <=0.6.7), pytorch-tabnet (>=0.1.0, <=0.1.2) +1 more potentially affected by CVE-2025-2149 via torch (1.0.1)

torch PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - lightwood =0.6.6, =0.1.0, =0.1.2 - syft 0.1.13a1 Source cves: CVE-2025-2149 Source advisory: OSV:GHSA-X3GM-94WQ-G975...

dleamse (>=0.2.1, <=0.3.6), gcgc (>=0.2.3, <=0.2.4) +9 more potentially affected by CVE-2025-2149 via torch (1.0.0)

torch PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - dleamse =0.2.1, =0.2.3, =0.3.1, =0.0.1.0, =0.2.3.1, =0.1.0a1, =0.1.0, =0.1.42 Source cves: CVE-2025-2149 Source advisory: OSV:GHSA-X3GM-94WQ-G975...

aaa-ml-datasets-course (1.0.0), aait (>=0.0.4.80, <=1.0.5) +2383 more potentially affected by CVE-2025-2149 via torch (>=2.0.0, <=2.6.0)

torch PYPI version =2.0.0, =0.0.4.80, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =0.1.0, =1.0.0.3, =0.0.0, =1.0.1, =1.1.3 and more Source cves: CVE-2025-2149 Source advisory: GHSA-X3GM-94WQ-G975...

aaa-ml-datasets-course (1.0.0), aait (>=0.0.4.80, <=1.0.5) +2383 more potentially affected by CVE-2025-2149 via torch (>=2.0.0, <=2.6.0)

torch PYPI version =2.0.0, =0.0.4.80, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =0.1.0, =1.0.0.3, =0.0.0, =1.0.1, =1.1.3 and more Source cves: CVE-2025-2149 Source advisory: OSV:GHSA-X3GM-94WQ-G975...

agent-smith (0.1.1), aixlab-cn-pre (0.1.0) +89 more potentially affected by CVE-2025-2149 via torch (1.9.0)

torch PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - agent-smith 0.1.1 - aixlab-cn-pre 0.1.0 - audacitorch =0.0.1, =0.1.2, =1.0.2, =1.35.0, =0.0.1rc19, =0.2.0.dev20220120, =0.2.1 and more Source cves:...

abdothebest (>=0.7.4, <=0.9.9), adafdr (0.1.8) +116 more potentially affected by CVE-2025-2149 via torch (1.4.0)

torch PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - abdothebest =0.7.4, =0.9.1.dev20200302, =1.2.0, =0.1.4, =0.1.1, =0.0.5, =1.0.0, =0.2.3, =0.2.0, =0.2.3 and more Source cves: CVE-2025-2149 Source...

aum (>=1.0.0, <=1.0.1), blitz-bayesian-pytorch (0.2.0) +41 more potentially affected by CVE-2025-2149 via torch (1.3.1)

torch PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aum =1.0.0, =0.3.0, =0.6.1, =0.1.0rc3, =0.0.1, =0.3.2, =0.0.1, =0.1.2, =0.0.6, =0.0.8 and more Source cves: CVE-2025-2149 Source advisory:...

aima (2023.2.4), aine-drl (0.1.1) +173 more potentially affected by CVE-2025-2149 via torch (1.11.0)

torch PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aima 2023.2.4 - aine-drl 0.1.1 - allennlp =2.9.2, =2.9.3, =0.1.0, =0.1.2, =1.0.0, =0.1.1, =0.4.3b20220621, =0.4.3b20220621, =0.4.3b20220621,...

aihwkit (>=0.3.0, <=0.6.0), aiqc (>=2.1.0, <=7.1.5) +133 more potentially affected by CVE-2025-2149 via torch (1.8.1)

torch PYPI version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aihwkit =0.3.0, =2.1.0, =2.2.0, =2.2.0, =0.2.2, =0.0.4, =0.7.0, =1.34.0, =0.0.1, =0.1.0, =3.0.0, =3.2.1 and more Source cves: CVE-2025-2149 Source...

afrotranslate (>=0.0.1, <=0.0.6), ai-traineree (0.0.13) +35 more potentially affected by CVE-2025-2149 via torch (1.8.0)

torch PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - afrotranslate =0.0.1, =1.4.0, =0.7.5, =0.2.0, =0.0.7, =0.0.1, =0.1.0, =4.0.0, =0.0.1, =1.0.0, =1.2.0 - handobjectacb 0.1.3 - hummingbird-ml 0.2.2 and...

ai-projects (>=0.0.1, <=0.0.4), allencv (>=0.1.2, <=0.1.3) +191 more potentially affected by CVE-2025-2149 via torch (1.7.1)

torch PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - ai-projects =0.0.1, =0.1.2, =1.2.0, =0.0.3, =1.2.0, =1.37.0, =0.0.2, =1.0.0, =0.6.6, =0.2.0, =0.2.1 - bento-tools 0.1.0 and more Source cves:...

allennlp (>=1.0.0.dev20200427, <=1.0.0rc4.dev20200501), allennlp-models (1.0.0rc3) +42 more potentially affected by CVE-2025-2149 via torch (1.5.0)

torch PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - allennlp =1.0.0.dev20200427, =0.0.1, =0.0.2, =0.0.9, =0.0.14, =0.1.7, =0.0.6, =0.0.6, =0.0.1, =0.0.1, =0.0.3, =0.0.4 and more Source cves: CVE-2025-21...

CVE-2025-2149

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnqSigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zeropoint leads to improper initialization. The attack needs to be approached...

aaa-ml-datasets-course (1.0.0), aana (>=0.2.1, <=0.2.2.2) +2115 more potentially affected by CVE-2025-2149 via torch (>=2.0.0, <=2.5.1)

torch PYPI version =2.0.0, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =0.0.0, =1.0.1, =2.1.1, =2.3.1 - acscend 1.0.0 - adabmdca 0.1.5 and more Source cves: CVE-2025-2149 Source advisory: OSV:PYSEC-2025-190...