Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/torch@2.7.1
purl pkg:pypi/torch@2.7.1
Next non-vulnerable version 2.9.0
Latest non-vulnerable version 2.9.0
Risk
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-dm2h-xssw-xqhb
Aliases:
CVE-2025-55554
PYSEC-2025-206
pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
2.9.0
Affected by 0 other vulnerabilities.
VCID-jqpq-n5zb-2ydh
Aliases:
CVE-2025-55552
PYSEC-2025-204
pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.
2.9.0
Affected by 0 other vulnerabilities.
VCID-rr2u-g78b-yfev
Aliases:
CVE-2025-55551
PYSEC-2025-203
An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.
2.9.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-3cvu-c3jj-yyhx An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor. CVE-2025-55560
PYSEC-2025-209
VCID-tw2j-udhp-nydv A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS). CVE-2025-55553
PYSEC-2025-205
VCID-vy3e-sq4h-eybf A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (DoS). CVE-2025-55558
PYSEC-2025-208
VCID-x8ck-txve-s7gy A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS). CVE-2025-55557
PYSEC-2025-207

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:23:22.251927+00:00 Pypa Importer Fixing VCID-3cvu-c3jj-yyhx https://github.com/pypa/advisory-database/blob/main/vulns/torch/PYSEC-2025-209.yaml 38.6.0
2026-06-02T04:23:22.049277+00:00 Pypa Importer Fixing VCID-vy3e-sq4h-eybf https://github.com/pypa/advisory-database/blob/main/vulns/torch/PYSEC-2025-208.yaml 38.6.0
2026-06-02T04:23:21.853189+00:00 Pypa Importer Fixing VCID-x8ck-txve-s7gy https://github.com/pypa/advisory-database/blob/main/vulns/torch/PYSEC-2025-207.yaml 38.6.0
2026-06-02T04:23:21.654256+00:00 Pypa Importer Affected by VCID-dm2h-xssw-xqhb https://github.com/pypa/advisory-database/blob/main/vulns/torch/PYSEC-2025-206.yaml 38.6.0
2026-06-02T04:23:21.467994+00:00 Pypa Importer Fixing VCID-tw2j-udhp-nydv https://github.com/pypa/advisory-database/blob/main/vulns/torch/PYSEC-2025-205.yaml 38.6.0
2026-06-02T04:23:21.263316+00:00 Pypa Importer Affected by VCID-jqpq-n5zb-2ydh https://github.com/pypa/advisory-database/blob/main/vulns/torch/PYSEC-2025-204.yaml 38.6.0
2026-06-02T04:23:21.064020+00:00 Pypa Importer Affected by VCID-rr2u-g78b-yfev https://github.com/pypa/advisory-database/blob/main/vulns/torch/PYSEC-2025-203.yaml 38.6.0