Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestions search

All statuses
Filter by:
With package: python313Packages.native-sparse-attention-pytorch

Found 1 matching suggestions

View:
Compact
Detailed
Untriaged
Permalink CVE-2026-4538
5.3 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): Low (L)
  • Availability (A): Low (L)
  • Exploit Code Maturity (E): Proof-of-Concept (P)
  • Remediation Level (RL): Not Defined (X)
  • Report Confidence (RC): Reasonable (R)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): Low (L)
created 6 months ago Activity log
  • Created suggestion 6 months ago
PyTorch pt2 Loading deserialization

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.

Affected products

PyTorch
  • ==2.10.0

Matching in nixpkgs

pkgs.python313Packages.gpytorch

Highly efficient and modular implementation of Gaussian Processes, with GPU acceleration

  • nixos-unstable -
  • nixos-26.05 -

pkgs.python314Packages.gpytorch

Highly efficient and modular implementation of Gaussian Processes, with GPU acceleration

  • nixos-unstable -
  • nixos-26.05 -

pkgs.python313Packages.pytorch3d

FAIR's library of reusable components for deep learning with 3D data

  • nixos-unstable -
    • nixos-unstable-small 0.7.9
  • nixos-26.05 -
    • nixos-26.05-small 0.7.9

pkgs.python314Packages.pytorch3d

FAIR's library of reusable components for deep learning with 3D data

  • nixos-unstable -
    • nixos-unstable-small 0.7.9
  • nixos-26.05 -
    • nixos-26.05-small 0.7.9

Package maintainers