Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
CVE-2025-70999
CVE-2025-70999
A GPU device-ID validation flaw in the flow.cuda.get_device_capability() component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted device ID.
Published Jan 30, 2026
https://github.com/advisories/GHSA-m9p8-wvpp-vmmm
CVSS Score
High
7.5
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
pypi
oneflow
0.0.2
pypi
oneflow
0.0.3
pypi
oneflow
0.6.0
pypi
oneflow
0.7.0
pypi
oneflow
0.8.0
pypi
oneflow
0.9.0
1-6 of 6
CVE-2025-70999 | Components Impacted | Sonatype Guide | Sonatype Guide
