Homepage
About Snyk

torch@2.4.0 vulnerabilities

Tensors and Dynamic neural networks in Python with strong GPU acceleration

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the torch package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Arbitrary Command Injection

torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration

Affected versions of this package are vulnerable to Arbitrary Command Injection through the torch.distributed.rpc framework due to missing function validation during RPC calls. An attacker can execute arbitrary commands by leveraging built-in Python functions such as eval during multi-CPU RPC communication.

How to fix Arbitrary Command Injection?

There is no fixed version for torch.

[0,)
Go back to all versions of this package