Crítica
CVE-2025-54951
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 152
Restablecer filtros
Media
ghsa-r54c-2xmf-2cf3
MS SWIFT Deserialization RCE Vulnerability
Alta
CVE-2025-30402
ExecuTorch vulnerable to Heap-based Buffer Overflow attack
Baja
CVE-2025-46570
Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching
Crítica
ghsa-ggpf-24jw-3fcw
CVE-2025-24357 Malicious model remote code execution fix bypass with PyTorch < 2.6.0
Crítica
CVE-2025-32434
PyTorch: `torch.load` with `weights_only=True` leads to remote code execution
Media
CVE-2025-71355
Picklescan failed to detect to some unsafe global function in Numpy library
Sin evaluar
CVE-2025-3136
A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAlloca
Media
CVE-2025-3121
A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation leads to memory corruption. Local access is r
Baja
CVE-2025-3001
A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approach
Media
CVE-2025-2999
A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attac
Media
CVE-2025-2998
A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory co
Baja
CVE-2025-3000
PyTorch is vulnerable to memory corruption through its torch.jit.script function
Baja
CVE-2025-2953
PyTorch susceptible to local Denial of Service
Crítica
CVE-2024-12029
A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files
Alta
CVE-2024-8020
PyTorch Lightning denial of service vulnerability
Crítica
CVE-2024-8019
PyTorch Lightning path traversal vulnerability
Baja
CVE-2025-2149
A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. The manipulation of th
Alta
CVE-2025-2148
A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler._call_end_callbacks_on_jit_fut of the component Tu
Media
CVE-2025-1945
Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch
Media
CVE-2025-1944
Zip Exploit Crashes Picklescan But Not PyTorch
Alta
CVE-2025-24357
vllm: Malicious model to RCE by torch.load in hf_model_weights_iterator
Crítica
CVE-2024-48063
In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing.
Crítica
CVE-2024-5980
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.