Approved changes feed: RSS · Atom

cpe:2.3:a:oneflow:oneflow:0.9.1:*:*:*:*:*:*:*

part: a version: 0.9.1 update: *

VendorOneflow (a9ff06aa-5d62-526a-9568-2af08a74d92b)
ProductOneflow (4a3b4dcd-9f4b-5fea-b652-162f94d1616e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/oneflow-inc/oneflow purl2cpe 2026-06-01 10:14:41.539377

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36745 vulnerable 2026-06-08 06:39:45.628963 Details available
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.index_select parameter.
Published: 2024-06-06T17:16:32.037Z
Updated: 2025-03-25T17:33:45.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36743 vulnerable 2026-06-08 06:39:45.628474 Details available
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is processed with oneflow.dot.
Published: 2024-06-06T17:12:58.912Z
Updated: 2025-02-13T15:59:35.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36742 vulnerable 2026-06-08 06:39:45.628137 Details available
An issue in the oneflow.scatter_nd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index parameter exceeds the range of shape.
Published: 2024-06-06T17:10:29.998Z
Updated: 2025-02-13T15:59:34.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36740 vulnerable 2026-06-08 06:39:45.627848 Details available
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index as a negative number exceeds the range of size.
Published: 2024-06-06T18:40:17.853Z
Updated: 2025-02-13T15:59:34.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36737 vulnerable 2026-06-08 06:39:45.627364 Details available
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.full parameter.
Published: 2024-06-06T17:43:04.792Z
Updated: 2025-02-13T15:59:33.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36736 vulnerable 2026-06-08 06:39:45.627051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36735 vulnerable 2026-06-08 06:39:45.626580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36734 vulnerable 2026-06-08 06:39:45.626057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36732 vulnerable 2026-06-08 06:39:45.623570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36730 vulnerable 2026-06-08 06:39:45.623037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.