{"data":{"ecosystem":"pypi","name":"pytorch","url":"https://aisecwatch.com/packages/pypi/pytorch","latestVersion":"1.0.2","firstReleaseAt":"2017-03-11T13:33:21.523Z","repository":null,"llm":{"exposure":"none","depth":null,"integratedAt":null,"integratedVersion":null,"sdks":[],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[],"advisories":[{"id":"0094f375-5206-4226-9066-26e543ebde09","url":"https://aisecwatch.com/issues/0094f375-5206-4226-9066-26e543ebde09","cveId":"CVE-2026-24747","title":"CVE-2026-24747: PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's…","headline":"PyTorch weights_only unpickler memory corruption via malicious checkpoint file","severity":"high","publishedAt":"2026-01-28T03:15:56.470Z","affected":["pytorch@< 2.10.0 (fixed: 2.10.0)"],"epssScore":0.00799,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-31T00:10:56.136Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}