Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-45907

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-47fc-vmwq-366v

PyTorch vulnerable to arbitrary code execution In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely. The fix for this issue is available in version 1.13.1. There is a release checker in issue #89855 https://github.com/pytorch/pytorch/issues/89855.

gitlab/pypi/torch/CVE-2022-45907

PyTorch vulnerable to arbitrary code execution In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely. The fix for this issue is available in version 1.13.1. There is a release checker in issue #89855 https://github.com/pytorch/pytorch/issues/89855.

pypa/torch/PYSEC-2022-43015

In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.

pysec/PYSEC-2022-43015

In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.