Pytorch/Serve
Approved changes feed: RSS · Atom
cpe:2.3:a:pytorch:pytorch/serve:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Pytorch (8d5d64cc-27cd-5f2c-92b2-bd0f62ea97c3) |
|---|---|
| Product | Pytorch/Serve (06ea0cd8-45ad-5eb9-b72b-946287d0a6ed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6577 |
vulnerable | 2026-06-08 06:58:19.927911 |
Unclaimed S3 Bucket Usage in pytorch/serve
MEDIUM (6.3)
In the latest version of pytorch/serve, the script 'upload_results_to_s3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility. This could lead to potential security vulnerabilities or unauthorized access to the bucket if it is not properly secured or claimed by the appropriate entity. The issue may result in data breaches, exposure of proprietary information, or unauthorized modifications to stored data.
Published: 2025-03-20T10:10:36.761Z
Updated: 2025-03-20T18:19:07.501Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.