CRITICAL9.9PyPI
GHSA-4mqg-h5jf-j9m7TorchServe Pre-Auth Remote Code Execution
Modified: 12/7/2024
package
PyPI/torchserve
pkg:pypi/torchserve
CRITICAL9.8PyPI
GHSA-8fxr-qfr9-p34w· CVE-2023-43654, PYSEC-2026-553TorchServe Server-Side Request Forgery vulnerability
Modified: 9/10/2026
HIGH8.2PyPI
GHSA-hhpg-v63p-wp7w· CVE-2024-35199, PYSEC-2026-1971TorchServe gRPC Port Exposure
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-m2mj-pr4f-h9jp· CVE-2023-48299, PYSEC-2026-1972TorchServe ZipSlip
Modified: 9/10/2026
CRITICAL9.8PyPI
GHSA-wxcx-gg9c-fwp2· CVE-2024-35198, PYSEC-2026-554TorchServe vulnerable to bypass of allowed_urls configuration
Modified: 9/10/2026
MEDIUM6.3PyPI
GHSA-xx7c-j7h3-vjcq· CVE-2024-6577, PYSEC-2026-1973TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
Modified: 7/7/2026
HIGH8.2PyPI
PYSEC-2026-1971· CVE-2024-35199, GHSA-hhpg-v63p-wp7wTorchServe gRPC Port Exposure
Modified: 7/7/2026
MEDIUM5.3PyPI
PYSEC-2026-1972· CVE-2023-48299, GHSA-m2mj-pr4f-h9jpTorchServe ZipSlip
Modified: 7/7/2026
MEDIUM6.3PyPI
PYSEC-2026-1973· CVE-2024-6577, GHSA-xx7c-j7h3-vjcqTorchServe script references S3 bucket without ensuring ownership or confirming accessibility
Modified: 7/7/2026
CRITICAL9.8PyPI
PYSEC-2026-553· CVE-2023-43654, GHSA-8fxr-qfr9-p34wTorchServe Server-Side Request Forgery vulnerability
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-554· CVE-2024-35198, GHSA-wxcx-gg9c-fwp2TorchServe vulnerable to bypass of allowed_urls configuration
Modified: 7/1/2026