Search for packages
| purl | pkg:pypi/torch@2.9.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-dm2h-xssw-xqhb | pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long(). |
CVE-2025-55554
PYSEC-2025-206 |
| VCID-jqpq-n5zb-2ydh | pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together. |
CVE-2025-55552
PYSEC-2025-204 |
| VCID-rr2u-g78b-yfev | An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation. |
CVE-2025-55551
PYSEC-2025-203 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-02T04:23:21.661830+00:00 | Pypa Importer | Fixing | VCID-dm2h-xssw-xqhb | https://github.com/pypa/advisory-database/blob/main/vulns/torch/PYSEC-2025-206.yaml | 38.6.0 |
| 2026-06-02T04:23:21.270910+00:00 | Pypa Importer | Fixing | VCID-jqpq-n5zb-2ydh | https://github.com/pypa/advisory-database/blob/main/vulns/torch/PYSEC-2025-204.yaml | 38.6.0 |
| 2026-06-02T04:23:21.073227+00:00 | Pypa Importer | Fixing | VCID-rr2u-g78b-yfev | https://github.com/pypa/advisory-database/blob/main/vulns/torch/PYSEC-2025-203.yaml | 38.6.0 |