AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

TorchServe security advisories

6 advisories · none critical or high in 12 months · latest Mar 20, 2025

Repository

6 advisories

Medium 6.3Mar 20, 2025TorchServe script references S3 bucket without ensuring ownership or confirming accessibilityCVE-2024-6577no fix yetHigh 8.2Jul 18, 2024TorchServe gRPC Port ExposureCVE-2024-35199fixed in 0.11.0Critical 9.8Jul 18, 2024TorchServe vulnerable to bypass of allowed_urls configurationCVE-2024-35198fixed in 0.11.0Medium 5.3Nov 21, 2023TorchServe ZipSlipCVE-2023-48299fixed in 0.9.0Critical 9.8Oct 2, 2023TorchServe Server-Side Request Forgery vulnerabilityCVE-2023-43654fixed in 0.8.2Critical 9.9Oct 2, 2023TorchServe Pre-Auth Remote Code ExecutionGHSA-4mqg-h5jf-j9m7fixed in 0.8.2
About TorchServe

Serving for PyTorch models.

Packages watched: torchserve (PyPI).

pytorch/serve