[Git][security-tracker-team/security-tracker][master] Add CVE-2026-65918/pytorch-vision

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6d8bb5b9 by Salvatore Bonaccorso at 2026-07-23T22:32:41+02:00
Add CVE-2026-65918/pytorch-vision

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,7 +13,10 @@ CVE-2026-65920 (Diffusers through 0.39.0, fixed in commit cee298c, contains a pa
 CVE-2026-65919 (Meshery before 1.0.57 contains an unauthenticated arbitrary file read  ...)
 	TODO: check
 CVE-2026-65918 (PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains  ...)
-	TODO: check
+	- pytorch-vision <unfixed>
+	NOTE: https://github.com/pytorch/vision/issues/9551
+	NOTE: https://github.com/pytorch/vision/pull/9520
+	NOTE: Fixed by: https://github.com/pytorch/vision/commit/4e05dc22f5f050a9528cc0ea09ceca6cdaf8f4ed
 CVE-2026-65917 (CyberPanel through 1.9.1, fixed in commit b198460, contains an insecur ...)
 	TODO: check
 CVE-2026-65916 (CyberPanel through 1.9.1, fixed in commit b198460, contains a missing  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d8bb5b9da90bfc7503fb472554d17e9e8d51e13

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6d8bb5b9da90bfc7503fb472554d17e9e8d51e13
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260723/1870d341/attachment.htm>