PyPI/torch CVE-2025-3730: low 3.3, EPSS 0.33%
PyTorch Improper Resource Shutdown or Release vulnerability
Action: Upgrade torch to 2.8.0 or later.
pip install torch==2.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.0 | - |
Fixed versions
| 2.8.0 |
Sources
- osv: GHSA-887c-mr87-cxwp
- https://nvd.nist.gov/vuln/detail/CVE-2025-3730
- https://github.com/pytorch/pytorch/issues/150835
- https://github.com/pytorch/pytorch/pull/150981
- https://github.com/pytorch/pytorch/commit/01f226bfb8f2c343f5c614a6bbf685d91160f3af
- https://github.com/timocafe/tewart-pytorch/commit/46fc5d8e360127361211cb237d5f9eef0223e567
- https://github.com/pytorch/pytorch
- https://vuldb.com/?ctiid.305076
- https://vuldb.com/?id.305076
- https://vuldb.com/?submit.553645
CVE-2025-3730 · published · modified · JSON