PyPI/torchserve CVE-2024-35199: high 8.2, EPSS 0.64%

TorchServe gRPC Port Exposure

Action: Upgrade torchserve to 0.11.0 or later.

pip install torchserve==0.11.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1971
• https://github.com/pytorch/serve/security/advisories/GHSA-hhpg-v63p-wp7w
• https://nvd.nist.gov/vuln/detail/CVE-2024-35199
• https://github.com/pytorch/serve/pull/3083
• https://github.com/pytorch/serve/commit/aab99506a17193de217aacc1119d9381dbc6ed2b
• https://github.com/pytorch/serve
• https://github.com/pytorch/serve/releases/tag/v0.11.0
• https://pypi.org/project/torchserve
• https://github.com/advisories/GHSA-hhpg-v63p-wp7w

CVE-2024-35199 · published 2026-07-07T14:34:37.036284Z · modified 2026-07-07T17:48:11.504059076Z · JSON