Commit f64b97b
committed
fix(deps): upgrade torch to 2.12.0 to resolve CVE-2025-2999
Upgrades torch from 2.9.0 to 2.12.0 to fix a medium-severity memory
corruption vulnerability (GHSA-vgrw-7cvw-pwgx, CVE-2025-2999) in
torch.nn.utils.rnn.unpack_sequence. Patched version requires >= 2.9.1.
Also updates associated CUDA/NVIDIA packages (cu12 -> cu13) and triton
(3.5.0 -> 3.7.0) as part of the torch dependency tree update.
Fixes: https://github.com/The-OpenROAD-Project/ORAssistant/security/dependabot/355
Signed-off-by: Jack Luar <jluar@precisioninno.com>1 parent 5a8e842 commit f64b97b
1 file changed
Lines changed: 167 additions & 89 deletions
0 commit comments