Skip to content
OpenAdvisories

Product · pytorch

serve

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-35198

    TorchServe bypass allowed_urls configuration

    TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. TorchServe 's check on allowed_urls configuration can be by-passed if the URL contains characters such as ".." but it does not prevent the model from being dow…

    pytorch serve torchserve PyPI
  • Critical 10.0
    CVE-2023-43654 Public exploit Scanner template EPSS 42%

    TorchServe Server-Side Request Forgery

    TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken ad…

    pytorch serve torchserve PyPI