pytorch
1 advisory in the AI Sec Watch database names pytorch (PyPI). No LLM component dependency is recorded for pytorch (PyPI). The most recent advisory that names pytorch and states a fix gives 2.10.0.
Advisories
Advisories that name pytorch as affected and state PyPI as its ecosystem. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Fix released | Published |
|---|---|---|---|---|---|
| CVE-2026-24747PyTorch weights_only unpickler memory corruption via malicious checkpoint file | High | < 2.10.0 | 2.10.0 | 2026-01-28 |
Dependencies of the latest release
As declared in PyPI metadata for version 1.0.2. Optional extras are listed with their extra name.
No runtime dependencies recorded.