Vendor
pytorch
9 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 6.3
Unclaimed S3 Bucket Usage in pytorch/serve
In the latest version of pytorch/serve, the script 'upload_results_to_s3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility. This could lead to potential security vulnerabilities or unauthori…
-
Medium 5.3
TorchServe ZipSlip
TorchServe is a tool for serving and scaling PyTorch models in production. Starting in version 0.1.0 and prior to version 0.9.0, using the model/workflow management API, there is a chance of uploading potentially harmful archives that contain files that are e…