Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-33x2-ppm4-v46v

Опубликовано: 22 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 1.9
CVSS3: 5.3

Описание

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

EPSS

Процентиль: 5%
0.00018
Низкий

1.9 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.3
ubuntu
19 дней назад

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

CVSS3: 5.3
redhat
19 дней назад

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

CVSS3: 5.3
nvd
19 дней назад

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

CVSS3: 5.3
debian
19 дней назад

A vulnerability was identified in PyTorch 2.10.0. The affected element ...

CVSS3: 5.3
fstec
19 дней назад

Уязвимость компонента pt2 Loading Handler фреймворка машинного обучения PyTorch, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 5%
0.00018
Низкий

1.9 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-20