Approved changes feed: RSS · Atom

cpe:2.3:a:linuxfoundation:pytorch:*:-:*:*:*:python:*:*

part: a version: * update: -

VendorLinuxfoundation (4b459c90-8cdb-5268-beb4-b69b5fe74234)
ProductPytorch (52dd45c0-ec5b-5d93-8a94-340622257e2a)
Edition*
Language*
Software edition*
Target softwarepython
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pytorch purl2cpe 2026-06-01 10:13:22.644353
pkg:deb/ubuntu/pytorch purl2cpe 2026-06-01 10:13:22.644355
pkg:docker/pytorch/pytorch purl2cpe 2026-06-01 10:13:22.644357
pkg:github/pytorch/pytorch purl2cpe 2026-06-01 10:13:22.644358
pkg:gitlab/gitlab-gold/pytorch purl2cpe 2026-06-01 10:13:22.644359
pkg:sourceforge/pytorch.mirror purl2cpe 2026-06-01 10:13:22.644361

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-46153 vulnerable 2026-06-08 07:25:11.286288 Details available
PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.
Published: 2025-09-25T00:00:00.000Z
Updated: 2025-09-25T18:33:13.153Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.