Skip to content
OpenAdvisories

Vendor

pytorch

9 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.3

    Unclaimed S3 Bucket Usage in pytorch/serve

    In the latest version of pytorch/serve, the script 'upload_results_to_s3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility. This could lead to potential security vulnerabilities or unauthori…

  • Medium 5.3

    TorchServe ZipSlip

    TorchServe is a tool for serving and scaling PyTorch models in production. Starting in version 0.1.0 and prior to version 0.9.0, using the model/workflow management API, there is a chance of uploading potentially harmful archives that contain files that are e…