{"data":{"ecosystem":"pypi","name":"torchserve","url":"https://aisecwatch.com/packages/pypi/torchserve","latestVersion":"0.12.0","firstReleaseAt":"2020-04-21T05:22:00.368Z","repository":"https://github.com/pytorch/serve.git","llm":{"exposure":"none","depth":null,"integratedAt":null,"integratedVersion":null,"sdks":[],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[{"ecosystem":"pypi","name":"intel-extension-for-pytorch","versionSpec":null,"scope":"extra:ipex"},{"ecosystem":"pypi","name":"numpy","versionSpec":null,"scope":"extra:onnx"},{"ecosystem":"pypi","name":"onnx","versionSpec":null,"scope":"extra:onnx"},{"ecosystem":"pypi","name":"onnx-runtime","versionSpec":null,"scope":"extra:onnx"},{"ecosystem":"pypi","name":"packaging","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"pillow","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"psutil","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"wheel","versionSpec":null,"scope":"runtime"}],"advisories":[{"id":"6b77f4b8-51d0-4947-a598-8619fbfceaa2","url":"https://aisecwatch.com/issues/6b77f4b8-51d0-4947-a598-8619fbfceaa2","cveId":"CVE-2024-6577","title":"CVE-2024-6577: In the latest version of pytorch/serve, the script 'upload_results_to_s3.sh' references the S3 bucket…","severity":"medium","publishedAt":"2025-03-20T14:15:32.987Z","affected":["torchserve@<= 0.11.0"],"epssScore":0.00388},{"id":"023a67f0-ae17-4db0-8d2e-35f19c5c56b7","url":"https://aisecwatch.com/issues/023a67f0-ae17-4db0-8d2e-35f19c5c56b7","cveId":"CVE-2024-35199","title":"CVE-2024-35199: TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. In affected…","severity":"high","publishedAt":"2024-07-19T06:15:14.777Z","affected":["torchserve@>= 0.3.0, < 0.11.0 (fixed: 0.11.0)"],"epssScore":0.00637},{"id":"67d1c7bb-9802-40ae-8af1-0dedf98ec3e5","url":"https://aisecwatch.com/issues/67d1c7bb-9802-40ae-8af1-0dedf98ec3e5","cveId":"CVE-2024-35198","title":"CVE-2024-35198: TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. TorchServe 's check…","severity":"critical","publishedAt":"2024-07-19T06:15:14.150Z","affected":["torchserve@< 0.11.0 (fixed: 0.11.0)"],"epssScore":0.00799},{"id":"a0c10b41-98e4-4766-a505-a427b167628f","url":"https://aisecwatch.com/issues/a0c10b41-98e4-4766-a505-a427b167628f","cveId":"CVE-2023-48299","title":"CVE-2023-48299: TorchServe is a tool for serving and scaling PyTorch models in production. Starting in version 0.1.0 and prior to…","severity":"medium","publishedAt":"2023-11-22T02:15:09.077Z","affected":["torchserve@>= 0.1.0, < 0.9.0 (fixed: 0.9.0)"],"epssScore":0.00679},{"id":"ed11e34c-20c6-4787-9d2e-a7317a66864d","url":"https://aisecwatch.com/issues/ed11e34c-20c6-4787-9d2e-a7317a66864d","cveId":"CVE-2023-43654","title":"CVE-2023-43654: TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks…","severity":"critical","publishedAt":"2023-09-29T03:15:09.627Z","affected":["torchserve@>= 0.1.0, < 0.8.2 (fixed: 0.8.2)"],"epssScore":0.41695}],"checkedAt":"2026-10-09T21:54:26.079Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}