Skip to main content

Torchserve

4 CVEs product

Monthly

CVE-2023-43654 Sep 28, 23:15 PyPI CRITICAL POC PATCH THREAT Act Now

TorchServe is a tool for serving and scaling PyTorch models in production. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure SSRF Pytorch Torchserve
NVD GitHub
CVSS 3.1
9.8
EPSS
35.3%
CVE-2024-35199 Jul 19, 02:15 PyPI HIGH PATCH This Week

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Resource to Wrong Sphere vulnerability could allow attackers to access resources from an unintended security context.

Information Disclosure Pytorch Torchserve
NVD GitHub
CVSS 3.1
8.2
EPSS
0.6%
CVE-2024-35198 Jul 19, 02:15 PyPI CRITICAL PATCH Act Now

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Pytorch Torchserve
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
CVE-2023-48299 Nov 21, 21:15 PyPI MEDIUM PATCH This Month

TorchServe is a tool for serving and scaling PyTorch models in production. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Pytorch Torchserve
NVD GitHub
CVSS 3.1
5.3
EPSS
0.7%
EPSS 35% CVSS 9.8
CRITICAL POC PATCH THREAT Act Now

TorchServe is a tool for serving and scaling PyTorch models in production. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure SSRF Pytorch +1
NVD GitHub
EPSS 1% CVSS 8.2
HIGH PATCH This Week

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Resource to Wrong Sphere vulnerability could allow attackers to access resources from an unintended security context.

Information Disclosure Pytorch Torchserve
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL PATCH Act Now

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Pytorch Torchserve
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

TorchServe is a tool for serving and scaling PyTorch models in production. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Pytorch Torchserve
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy