415 matches found
01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25417 more potentially affected by CVE-2025-2149 via torch (>=1.0.0 <=2.5.1)
torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2025-2149 Source advisory: OSV:PYSEC-2025-190...
01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25575 more potentially affected by CVE-2025-2148 via torch (>=1.0.0 <=2.6.0)
torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2025-2148 Source advisory: OSV:GHSA-C678-JFCJ-6JMF...
01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25417 more potentially affected by CVE-2025-2148 via torch (>=1.0.0 <=2.5.1)
torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2025-2148 Source advisory: OSV:PYSEC-2025-189...
Deserialization of Untrusted Data
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the hfmodelweightsiterator process due to the usage of the torch.load function with the weightsonly parameter...
PYSEC-2025-58
vLLM is a library for LLM inference and serving. vllm/modelexecutor/weightutils.py implements hfmodelweightsiterator to load the model checkpoint, which is downloaded from huggingface. It uses the torch.load function and the weightsonly parameter defaults to False. When torch.load loads malicious...
PYSEC-2025-58
vLLM is a library for LLM inference and serving. vllm/modelexecutor/weightutils.py implements hfmodelweightsiterator to load the model checkpoint, which is downloaded from huggingface. It uses the torch.load function and the weightsonly parameter defaults to False. When torch.load loads malicious...
PT-2025-5340 · Vllm · Vllm
Name of the Vulnerable Software and Affected Versions: vLLM versions prior to 0.7.0 Description: The issue concerns the vLLM library, specifically the vllm/model executor/weight utils.py file, which implements hf model weights iterator to load model checkpoints downloaded from Hugging Face. It...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the torch.load function within the Checkpoint.loadcheckpoint method without restrictions. Details Serialization is a process of converting an object into a sequence of bytes which can be persisted t...
Deserialization of Untrusted Data
Overview chattts is an A generative speech model for daily dialogue Affected versions of this package are vulnerable to Deserialization of Untrusted Data when loading the tokenizer with torch.load. An attacker can exploit this by supplying a malicious tokenizer.pt file, leading to code execution...
Remote Code Execution via Unsafe Torch Load in TransfoXLCorpus
Description This is a new bypass to the patch of my previous report, in which the maintainers only apply the "TRUSTREMOTECODE" to guard the vulnerable code of vocabdict = pickle.loadf, but overlooked another vulnerable code of corpusdict = torch.loadresolvedcorpusfile without setting...
Malicious code in open-clips-torch (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 10d9dac2d506ba155492c5ada78ed91eb05119b7dda57f12c0d34c878c543aeb A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
MAL-2024-10720 Malicious code in open-clips-torch (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 10d9dac2d506ba155492c5ada78ed91eb05119b7dda57f12c0d34c878c543aeb A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25234 more potentially affected by CVE-2024-48063 via torch (>=1.0.0 <=2.4.1)
torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2024-48063 Source advisory: OSV:PYSEC-2024-259...
MAL-2024-11732 Malicious code in torhc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 385cb451ed567a10096fce231790d6a9bce59bb47c8d7bdfff5a8f4aaa0854ed During installation, a cryptominer is secretly installed and started. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Remote Code Execution (RCE)
torch is vulnerable to Remote Code Execution RCE. The vulnerability is caused by a lack of restriction on function calls when a worker node sends a PythonUDF to the master node, which then executes the function without proper validation within the torch.distributed.rpc framework. This allows...
Security Bulletin: Maximo Application Suite - torch-1.13.1-cp37-cp37m-manylinux1_x86_64.whl is vulnerable to multiple security CVEs used in IBM Maximo Application Suite - Monitor Component
Summary IBM Maximo Application Suite - Monitor Component uses torch-1.13.1-cp37-cp37m-manylinux1x8664.whl which is vulnerable to multiple security CVEs. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-31583 DESCRIPTION: PyTorch is...
Out-of-bounds Read
Overview torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration Affected versions of this package are vulnerable to Out-of-bounds Read due to improper validation of user-supplied input in the flatbufferloader.cpp component. An attacker can read sensitive information...
21cmpsdenoiser (>=1.0.0 <=1.0.2), 2404-segmentation-pipeline (>=0.1.0 <=1.0.0) +23481 more potentially affected by CVE-2024-31584 via torch (>=2.0.0 <=2.1.2)
torch PYPI version =2.0.0, =1.0.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.10.5, =0.1.0.dev1, =1.0.0, =0.1.0, =0.4.0 and more Source cves: CVE-2024-31584 Source advisory: SNYK:PYTHON-TORCH-14534878...
21cmpsdenoiser (>=1.0.0 <=1.0.2), 2404-segmentation-pipeline (>=0.1.0 <=1.0.0) +24678 more potentially affected by CVE-2024-31584 via torch (>=1.0.0 <=2.1.2)
torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.10.5, =0.10.13 and more Source cves: CVE-2024-31584 Source advisory: OSV:PYSEC-2024-250...