Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: pytorch Component: Torchserve Clear all filters
TI-2024-23270 CVE-2024-35198 · GHSA-wxcx-gg9c-fwp2

TorchServe bypass allowed_urls configuration

Priority MEDIUM 43

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00799 Published 2024-07-18 Fixed in 0.11.0 CWE-706
TI-2024-23271 CVE-2024-35199 · GHSA-hhpg-v63p-wp7w

TorchServe gRPC Port Exposure

Priority MEDIUM 43

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00637 Published 2024-07-18 Fixed in 0.11.0 CWE-668
TI-2023-26162 CVE-2023-48299 · GHSA-m2mj-pr4f-h9jp

TorchServe ZipSlip

Priority LOW 25

TorchServe is a tool for serving and scaling PyTorch models in production.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00679 Published 2023-11-21 Fixed in 0.9.0 CWE-22
TI-2023-23379 CVE-2023-43654 · GHSA-8fxr-qfr9-p34w

TorchServe Server-Side Request Forgery

Priority HIGH 82

TorchServe is a tool for serving and scaling PyTorch models in production.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.42495 Published 2023-09-28 Fixed in 0.8.2 CWE-918