EUVD-2025-54731

Malicious code in eager-green-prawn npm...

MAL-2025-67918 Malicious code in eager-green-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71ead66acda41e32e3806c2adae804e9981d334bdf5427eec522696df9aca5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54732

Malicious code in eager-amaranth-pelican npm...

MAL-2025-67917 Malicious code in eager-amaranth-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7770aa399f96d05ea16996490890b30f48a7271b4761d47a54adb2d5edb1012e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59840ceb2eca9c71510a403ecc68bf814a45ba8ec216a0023ee562376012d471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2020-0200

Malware in sbrugna...

EUVD-2014-9818

Malware in sbrugna...

EUVD-2020-0219

Malware in sbrugna...

BIT-PYTORCH-2025-46148

In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistancep=2 produces incorrect results...

EUVD-2025-31112

Malicious code in bioql PyPI...

EUVD-2022-2670

Malicious code in bioql PyPI...

PT-2025-40399

Name of the Vulnerable Software and Affected Versions YOSHOP 2.0 Description The software allows unauthorized disclosure of information through comment-list API endpoints within the Goods module. The Comment model loads the related User model without filtering specific fields. Due to the absence ...

SUSE CVE-2025-46148

In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistancep=2 produces incorrect results...

In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.

...

Linux Distros Unpatched Vulnerability : CVE-2025-46148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistancep=2 produces incorrect results. CVE-2025-46148 Note that Nessus relies on the presence of the...

PyTorch Information Disclosure Vulnerability (CNVD-2025-23285)

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from an information disclosure vulnerability that stems from nn.PairwiseDistancep=2 producing incorrect results in eager mode, no details of the vulnerability are provided at this time...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the torch.nantonum function when used with .long to convert float"inf" in eager mode. An attacker can cause unexpected behavior by providing specially crafted input that triggers an integer overflow...

Integer Overflow or Wraparound

Overview torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the torch.nantonum function when used with .long to convert float"inf" in eager mode. An attacker can cause...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the torch.nantonum function when used with .long to convert float"inf" in eager mode. An attacker can cause unexpected behavior by providing specially crafted input that triggers an integer overflow...

Always-Incorrect Control Flow Implementation

Overview torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation when compiling model with torch.rot90 and torch.randnlike functions while...