Skip to content

Commit ab50525

Browse files
authored
fix(deps): upgrade torch to 2.12.0 to resolve CVE-2025-2999 (#300)
Upgrades torch from 2.9.0 to 2.12.0 to fix a medium-severity memory corruption vulnerability (GHSA-vgrw-7cvw-pwgx, CVE-2025-2999) in torch.nn.utils.rnn.unpack_sequence. Patched version requires >= 2.9.1. Also updates associated CUDA/NVIDIA packages (cu12 -> cu13) and triton (3.5.0 -> 3.7.0) as part of the torch dependency tree update. Fixes: https://github.com/The-OpenROAD-Project/ORAssistant/security/dependabot/355 Signed-off-by: Jack Luar <jluar@precisioninno.com>
1 parent 5a8e842 commit ab50525

1 file changed

Lines changed: 167 additions & 89 deletions

File tree

0 commit comments

Comments
 (0)