Executive brief
TorchServe ZipSlip
Affected products
- PyPI torchserve
Junglewise Threat Intelligence
CVE-2023-48299: PYSEC-2026-1972 - TorchServe ZipSlip
CVE-2023-48299 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: torchserve (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1973 - TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
- PYSEC-2026-1971 - TorchServe gRPC Port Exposure
- PYSEC-2026-553 - TorchServe Server-Side Request Forgery vulnerability
- PYSEC-2026-554 - TorchServe vulnerable to bypass of allowed_urls configuration
- TorchServe Pre-Auth Remote Code Execution