CVE-2025-55560
1 advisory.
PyPI/torch CVE-2025-55560: high 7.5, EPSS 0.41%
An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.
Action: Upgrade torch to 2.7.1 or later.
pip install torch==2.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.1 | - |
Fixed versions
| 2.7.1 |
Sources
- osv: PYSEC-2025-209
- https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc
- https://github.com/pytorch/pytorch/issues/151522
- https://github.com/pytorch/pytorch/pull/151897
CVE-2025-55560 · published · modified · JSON