PyPI/torch CVE-2025-55557: high 7.5, EPSS 0.41%
A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).
Action: Upgrade torch to 2.7.1 or later.
pip install torch==2.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.1 | - |
Fixed versions
| 2.7.1 |
Sources
- osv: PYSEC-2025-207
- https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc
- https://github.com/pytorch/pytorch/issues/151738
- https://github.com/pytorch/pytorch/pull/151931
CVE-2025-55557 · published · modified · JSON