Executive brief
TorchServe Server-Side Request Forgery vulnerability
Affected products
- PyPI torchserve
Junglewise Threat Intelligence
CVE-2023-43654: PYSEC-2026-553 - TorchServe Server-Side Request Forgery vulnerability
CVE-2023-43654 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: torchserve (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1973 - TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
- PYSEC-2026-1971 - TorchServe gRPC Port Exposure
- PYSEC-2026-1972 - TorchServe ZipSlip
- PYSEC-2026-554 - TorchServe vulnerable to bypass of allowed_urls configuration
- TorchServe Pre-Auth Remote Code Execution