Approved changes feed: RSS · Atom

cpe:2.3:a:oneflow:oneflow:0.9.0:*:*:*:*:*:*:*

part: a version: 0.9.0 update: *

VendorOneflow (a9ff06aa-5d62-526a-9568-2af08a74d92b)
ProductOneflow (4a3b4dcd-9f4b-5fea-b652-162f94d1616e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/oneflow-inc/oneflow purl2cpe 2026-06-01 10:14:41.539376

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-71011 vulnerable 2026-06-08 07:43:17.101109 Details available
An input validation vulnerability in the flow.Tensor.new_empty/flow.Tensor.new_ones/flow.Tensor.new_zeros component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Published: 2026-01-29T00:00:00.000Z
Updated: 2026-01-29T16:59:06.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-71009 vulnerable 2026-06-08 07:43:17.100601 Details available
An input validation vulnerability in the flow.scatter/flow.scatter_add component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted indices.
Published: 2026-01-29T00:00:00.000Z
Updated: 2026-01-29T17:00:29.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-71008 vulnerable 2026-06-08 07:43:17.100221 Details available
A segmentation violation in the oneflow._oneflow_internal.autograd.Function.FunctionCtx.mark_non_differentiable component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Published: 2026-01-29T00:00:00.000Z
Updated: 2026-01-29T17:08:58.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-71007 vulnerable 2026-06-08 07:43:17.099891 Details available
An input validation vulnerability in the oneflow.index_add component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Published: 2026-01-28T00:00:00.000Z
Updated: 2026-02-02T18:48:44.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-71006 vulnerable 2026-06-08 07:43:17.099665 Details available
A floating point exception (FPE) in the oneflow.reshape component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Published: 2026-01-28T00:00:00.000Z
Updated: 2026-01-29T21:16:47.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-71005 vulnerable 2026-06-08 07:43:17.099338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-71004 vulnerable 2026-06-08 07:43:17.098819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-71003 vulnerable 2026-06-08 07:43:17.098589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-71002 vulnerable 2026-06-08 07:43:17.098265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-71001 vulnerable 2026-06-08 07:43:17.097769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-71000 vulnerable 2026-06-08 07:43:17.097389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70999 vulnerable 2026-06-08 07:43:17.096882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65891 vulnerable 2026-06-08 07:39:21.060073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65890 vulnerable 2026-06-08 07:39:21.059612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65889 vulnerable 2026-06-08 07:39:21.059242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65888 vulnerable 2026-06-08 07:39:21.059008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65887 vulnerable 2026-06-08 07:39:21.058752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-65886 vulnerable 2026-06-08 07:39:21.058321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63397 vulnerable 2026-06-08 07:39:17.562312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.