Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-65890
7.5
HIGHCVSS v3
Published
January 28, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A device-ID validation flaw in OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) by calling flow.cuda.synchronize() with an invalid or out-of-range GPU device index.
Oneflow-Inc/oneflow
GitHubOneFlow is a deep learning framework designed to be user-friendly, scalable and efficient.
GitHubOneFlow is a deep learning framework designed to be user-friendly, scalable and efficient.= 0.9.0NVD