{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.5.0-NA"}],"component":"torch","cve_ids":["CVE-2025-63396"],"ecosystem":"PyPI","epss":0.00133,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGP7AKJGNKPFJRYM1T9TQC","modified_at":"2026-05-21T15:00:31.925271484Z","published_at":"2025-11-12T21:15:52.397Z","references":["https://osv.dev/vulnerability/PYSEC-2025-210","http://pytorch.com","https://github.com/Daisy2ang","https://github.com/pytorch/pytorch/issues/156563","https://github.com/pytorch/pytorch"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"PYSEC-2025-210","url":"https://osv.dev/vulnerability/PYSEC-2025-210"}],"summary":"An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (Do"}