Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-33x2-ppm4-v46v

Опубликовано: 22 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 1.9
CVSS3: 5.3

Описание

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

EPSS

Процентиль: 5%
0.00018
Низкий

1.9 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.3
ubuntu
23 дня назад

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

CVSS3: 5.3
redhat
23 дня назад

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

CVSS3: 5.3
nvd
23 дня назад

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

CVSS3: 5.3
debian
23 дня назад

A vulnerability was identified in PyTorch 2.10.0. The affected element ...

CVSS3: 5.3
fstec
23 дня назад

Уязвимость компонента pt2 Loading Handler фреймворка машинного обучения PyTorch, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 5%
0.00018
Низкий

1.9 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-20