Serve

This hub aggregates every CVE we track for Serve, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Serve.

• CVE-2024-35198TorchServe bypass allowed_urls configuration9.8Jul 18, 2024
• CVE-2024-35199TorchServe gRPC Port Exposure8.2Jul 18, 2024
• CVE-2023-48299TorchServe ZipSlip5.3Nov 21, 2023
• CVE-2023-43654TorchServe Server-Side Request Forgery10.0Sep 28, 2023
• GHSA-cpgr-wmr9-qxv4Cross-Site Scripting in serveSep 11, 2020
• GHSA-xw79-hhv6-578cCross-Site Scripting in serveSep 11, 2020
• GHSA-48gc-5j93-5cfqPath Traversal in serveSep 11, 2020
• GHSA-wm7q-rxch-43mxByass due to validation before canonicalization in serveSep 1, 2020
• CVE-2019-5415A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to.7.5Mar 17, 2019
• CVE-2019-5417A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server.7.5Mar 17, 2019
• CVE-2018-3712serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of ...6.5Jun 7, 2018
• CVE-2018-3718serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.5.3Jun 7, 2018
• CVE-2018-3809Information exposure through directory listings in serve 6.5.3 allows directory listing and file access even when they have been set to be ignored.5.3Jun 1, 2018