{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.0-cu124"}],"component":"torch","cve_ids":["CVE-2025-2148"],"ecosystem":"PyPI","epss":0.00437,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c678-jfcj-6jmf","id":"tcs_01M5KGP330MBTX78CS1TRK1W12","modified_at":"2026-06-10T17:02:43.716395826Z","published_at":"2025-03-10T12:15:12.617Z","references":["https://osv.dev/vulnerability/PYSEC-2025-189","https://vuldb.com/?id.299059","https://vuldb.com/?submit.505959","https://github.com/pytorch/pytorch/issues/147722","https://vuldb.com/?ctiid.299059","https://github.com/advisories/GHSA-c678-jfcj-6jmf"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2025-189","url":"https://osv.dev/vulnerability/PYSEC-2025-189"}],"summary":"A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler._call_end_callbacks_on_jit_fut of the component Tu"}