Vulnerabilities (CVE)

Filtered by CWE-1176
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-46153 1 Linuxfoundation 1 Pytorch 2025-10-03 N/A 5.3 MEDIUM
PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.
CVE-2024-23323 1 Envoyproxy 1 Envoy 2024-11-21 N/A 4.3 MEDIUM
Envoy is a high-performance edge/middle/service proxy. The regex expression is compiled for every request and can result in high CPU usage and increased request latency when multiple routes are configured with such matchers. This issue has been addressed in released 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.