CVE Tools
Track your stack

Modelscope

9 CVEs tracked since 2025. Since Mar 2025, none of them reached CISA KEV.

Modelscope CVEs per month

Mar 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Modelscope CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-0390
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Modelscope's monthly top three, with their CVEs summed over those months.

  1. Modelscope/agentscope91 month
  2. Agentscope71 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Modelscope.

  1. CVE-2026-85686ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs7.5
  2. CVE-2026-84202ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading8.8
  3. CVE-2026-10801modelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hash3.6
  4. CVE-2026-6606modelscope agentscope _agent_base.py _process_audio_block server-side request forgery7.3
  5. CVE-2026-6605modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery7.3
  6. CVE-2026-6604modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgery7.3
  7. CVE-2026-6603modelscope agentscope _python.py execute_shell_command code injection7.3
  8. CVE-2026-2256Command injection vulnerability in ModelScope's ms-agent6.5
  9. CVE-2024-8487CORS Vulnerability in modelscope/agentscope9.8
  10. CVE-2024-8556Stored XSS in modelscope/agentscope6.1
  11. CVE-2024-8524Directory Traversal in modelscope/agentscope7.5
  12. CVE-2024-8537Path Traversal in modelscope/agentscope9.1
  13. CVE-2024-8551Path Traversal in modelscope/agentscope9.1
  14. CVE-2024-8438Path Traversal in modelscope/agentscope7.5
  15. CVE-2024-8502Remote Code Execution via Deserialization in modelscope/agentscope9.8

The record

Peak rank
#113 in Mar 2025
Busiest month shown
Mar 2025, 9 CVEs
Months with a KEV entry
0 since Mar 2025
Monthly snapshots
1 since 2025
Modelscope's full record, month by month