| Package | Affected versions | Patched versions |
|---|---|---|
| torch | < 1.13.1 | 1.13.1 |
| pytorch | < 1.13.1 | 1.13.1 |
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely. The fix for this issue is available in version 1.13.1. There is a release checker in issue #89855.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free