Read the docs

pytorch

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

pytorch records in CISA KEV

No pytorch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Torchserve · all components

TI-2023-23379 CVE-2023-43654 · GHSA-8fxr-qfr9-p34w

TorchServe Server-Side Request Forgery

Priority HIGH 82

TorchServe is a tool for serving and scaling PyTorch models in production.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.42495 Published 2023-09-28 Fixed in 0.8.2 CWE-918
TI-2024-23271 CVE-2024-35199 · GHSA-hhpg-v63p-wp7w

TorchServe gRPC Port Exposure

Priority MEDIUM 43

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00637 Published 2024-07-18 Fixed in 0.11.0 CWE-668
TI-2024-23270 CVE-2024-35198 · GHSA-wxcx-gg9c-fwp2

TorchServe bypass allowed_urls configuration

Priority MEDIUM 43

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00799 Published 2024-07-18 Fixed in 0.11.0 CWE-706
TI-2023-26162 CVE-2023-48299 · GHSA-m2mj-pr4f-h9jp

TorchServe ZipSlip

Priority LOW 25

TorchServe is a tool for serving and scaling PyTorch models in production.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00679 Published 2023-11-21 Fixed in 0.9.0 CWE-22
Open these records in search →