repository icon
pytorch / serve Project repository

Serve, optimize and scale PyTorch models in production

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN23 DAYS

FIX

WITHINN/A DAYS

Test repo check - pytorch-serve
ripp3rdoc
self closed
Test submission - please close
ripp3rdoc
self closed
discover-api-test
bugi952
self closed
SSRF via TorchServe Model Registration `url` Parameter Allows Unauthenticated Se...
01data-ai
self closed
jd-admrl-ai
self closed
TokenAuthorization uses 48-bit tokens with non-constant-time comparison — feasib...
jd-admrl-ai
self closed
Remote Code Execution (RCE) via Insecure Deserialization in Model Loading
garep771
duplicate
Critical
Remote Code Execution via pickle deserialization of inference request body in De...
n0x00x
duplicate
Critical
[RCE] Unsafe torch.load() Deserialization of Inference Request Body in TorchServ...
sukhawarring
duplicate
Critical
TorchServe RCE via sourceVocab path injection in TextHandler
ryansecurityfanpierlabs
pending
TOCTOU path traversal in WorkflowArchive — archive downloaded and extracted befo...
snakeyworm
pending
RCE via path traversal in requirementsFile manifest field allows pip install fro...
snakeyworm
pending
Path traversal via configFile and serializedFile fields in MAR manifest enables...
snakeyworm
pending
Token authentication bypass via substring match on full HTTP request string in m...
snakeyworm
pending
RCE via unsafe torch.load() deserialization of raw HTTP request body in DenseNet...
snakeyworm
pending
TorchServe allowed_urls bypass via absolute directory path
al4n4n
duplicate
None
TorchServe densenet_handler inference-API pickle RCE
al4n4n
pending
Weak authentication token generation with only 48-bit entropy (6 bytes) — brute-...
wormysnake
pending
SSRF via default allowed_urls permitting any URL in model registration — enables...
wormysnake
pending
Unauthenticated RCE via torch.load on raw HTTP request body in DenseNet inferenc...
wormysnake
pending
Remote Code Execution via unsafe `torch.load()` without `weights_only=True` in T...
lolbotym
pending
Arbitrary code execution via unsafe torch.load() without weights_only in 5 core...
elliottower
pending
DenseNetHandler Inference API RCE via Unsafe torch.load() Deserialization
csaw-admin
pending
Arbitrary Code Execution via torch.load on Untrusted User Input in DenseNet Hand...
lihfdgjr
pending
Post-Extraction Path Traversal via Unvalidated configFile in MANIFEST.json
ryanhugh-security-fanpierlabs
duplicate
Medium
Remote Code Execution via unsafe torch.load() on inference input in DenseNetHand...
vitocrl
duplicate
High
Remote function integrity check bypass -> RCE via cloudpickle deserialization
vitocrl
self closed
SSRF via Model Registration URL — Default Config Allows Fetching from Internal N...
nhomyk
pending
World-writable permissions (0777) on Azure File storage in Kubernetes deployment...
nhomyk
pending
Cleartext HTTP for model inference in KServe integration — sensitive data expose...
nhomyk
pending
RCE via torch.load() without weights_only + Runtime.exec() with model paths in T...
nhomyk
duplicate
Critical
Path Traversal via configFile in Model Archive MANIFEST.json (CWE-22)
orel-asper
duplicate
Medium
Remote Code Execution via Pickle Deserialization in DenseNet Inference Handler (...
orel-asper
duplicate
Critical
`allowed_urls` security control bypass via HTTP redirect allows loading maliciou...
dave-london
pending
Unsafe torch.load() without weights_only=True in _load_pickled_model allows RCE...
luciusaskaner
duplicate
Critical
Unsafe torch.load() in TorchServe DenseNet Handler Enables Unauthenticated Netwo...
odysseypro25-project
duplicate
Critical
SSRF to RCE via Model Registration URL Combined with Unsafe torch.load Deseriali...
pelegs202-design
pending
Unsafe SnakeYAML Deserialization allows Remote Code Execution via malicious .mar...
eistee82
pending
Code Injection via Runtime.exec() in MetricCollector.java — CWE-94 RCE in pytorc...
theoddesseyp-ai
pending
OS Command Injection via subprocess.check_call(shell=True) in ts_scripts/marsgen...
theoddesseyp-ai
pending
Unauthenticated RCE via torch.load() on HTTP Request Body in TorchServe DenseNet...
theoddesseyp-ai
duplicate
Critical
RCE via torch.load() on raw inference input in DenseNetHandler
eistee82
pending
Unauthenticated RCE via torch.load() on HTTP Request Body in TorchServe DenseNet...
theoddesseyp-ai
duplicate
Critical
Critical RCE via Unsafe torch.load() on Network Request Data in TorchServe Dense...
theoddesseyp-ai
duplicate
Critical
Path Traversal via configFile Field in Model MANIFEST.json Bypasses Zip Slip Pro...
goblinmode2700
duplicate
None
SSRF and Local File Read via Default file:// URL Allowlist in Model Registration
goblinmode2700
pending
Token Authorization Bypass via Broad String Match in TokenAuthorizationHandler
goblinmode2700
pending
Critical RCE via Unsafe torch.load Deserialization in DenseNetHandler
goblinmode2700
pending
Unsafe torch.load in base_handler.py enables RCE via malicious model archives (M...
narrator3333-hash
duplicate
Critical
Zip Slip vulnerabilities via unsafe zipfile.extractall() in multiple TorchServe...
elucidator-hky
self closed
Remote Code Execution via unsafe torch.load() deserialization in DenseNet handle...
elucidator-hky
self closed
Critical Remote Code Execution via Insecure Deserialization in TorchServe (torch...
saiganesh3726-code
duplicate
Critical
Unsafe Deserialization via bare torch.load in TorchServe model loading
etwithin
duplicate
High
Zip-Slip Mitigation Bypass via Nested Archive Extraction in TorchServe Model Han...
zenmagnum
pending
Zip Slip prefix-bypass in ZipUtils allows path traversal and arbitrary file writ...
4ur0n
pending
TorchServe Remote Code Execution via Unsafe torch.load in Model Registration API
avienma007
duplicate
Critical
Incomplete Fix for CVE-2024-35198 in WorkflowArchive (Path Traversal to RCE)
zitoxxx
pending
Metrics API and /api-description Endpoint Bypass Token Authorization in TorchSer...
galanzi2580-wq
pending
Local File Inclusion via Default file:// URL Pattern in Model Registration Allow...
galanzi2580-wq
pending
Metrics API Authentication Bypass When Token Auth is Enabled Allows Unauthentica...
galanzi2580-wq
pending
Unauthenticated Remote Code Execution (RCE) via Default Management API Exposure...
orel-asper
duplicate
Critical
Remote Code Execution via enable_model_api Bypass through Workflow Registration
jeongmin-choi00
duplicate
Critical
RCE via unsafe torch.load() deserialization of user inference input in DenseNetH...
yanivfi1978
duplicate
Critical
Unauthenticated Remote Code Execution via Missing Access Control on Workflow Reg...
l1iith
pending
TorchServe: default allowed_urls permits file:// and http(s):// (SSRF + local fi...
theagentknownasren-gif
pending
TorchServe: requirementsFile path traversal leads to attacker-controlled pip ins...
theagentknownasren-gif
pending
TorchServe: MANIFEST.json configFile path traversal causes arbitrary file read +...
theagentknownasren-gif
duplicate
Medium
TorchServe: MANIFEST.json configFile path traversal causes arbitrary file read +...
theagentknownasren-gif
duplicate
Medium
TorchServe: MANIFEST.json configFile path traversal causes arbitrary file read +...
theagentknownasren-gif
pending
Remote Code Execution via Insecure torch.load() Deserialization in Multiple Hand...
sermikr0
duplicate
Critical
SSRF in Model Registration API allows access to cloud metadata and internal serv...
jonnylitten
pending
Critical RCE chain in TorchServe v2.2.0 via unverified model handlers (.mar) — d...
ko7-dev
duplicate
Critical
Critical Remote Code Execution in PyTorch Serve via Unverified Model Handlers
ko7-dev
self closed
Unclaimed S3 Bucket Usage
gauravbhatia1211
Medium
•$125•CVE-2024-6577
Remote Code Execution due to Full Controled File Write in pytorch/serve
knightswd
Critical
•$1500
s3 bucket takeover
ranjit-git
informative
Medium
huntr: pytorch/serve