Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-1973
  • PyPI/torchserve
 TorchServe script references S3 bucket without ensuring ownership or confirming accessibility 07 Jul
  • No fix available
  • Severity - 6.3 (Medium)
PYSEC-2026-1971
  • PyPI/torchserve
 TorchServe gRPC Port Exposure 07 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-1972
  • PyPI/torchserve
 TorchServe ZipSlip 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-553
  • PyPI/torchserve
 TorchServe Server-Side Request Forgery vulnerability 29 Jun
  • Fix available
  • Severity - 9.8 (Critical)
PYSEC-2026-554
  • PyPI/torchserve
 TorchServe vulnerable to bypass of allowed_urls configuration 29 Jun
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-xx7c-j7h3-vjcq
  • PyPI/torchserve
 TorchServe script references S3 bucket without ensuring ownership or confirming accessibility 20 Mar 2025
  • No fix available
  • Severity - 6.3 (Medium)
GHSA-hhpg-v63p-wp7w
  • PyPI/torchserve
 TorchServe gRPC Port Exposure 18 Jul 2024
  • Fix available
  • Severity - 8.8 (High)
GHSA-wxcx-gg9c-fwp2
  • PyPI/torchserve
 TorchServe vulnerable to bypass of allowed_urls configuration 18 Jul 2024
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-m2mj-pr4f-h9jp
  • PyPI/torchserve
 TorchServe ZipSlip 21 Nov 2023
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-8fxr-qfr9-p34w
  • PyPI/torchserve
 TorchServe Server-Side Request Forgery vulnerability 02 Oct 2023
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-4mqg-h5jf-j9m7
  • PyPI/torchserve
 TorchServe Pre-Auth Remote Code Execution 02 Oct 2023
  • Fix available
  • Severity - 9.9 (Critical)