PyPI/torchserve CVE-2023-48299: medium 5.3, EPSS 0.68%

TorchServe ZipSlip

Action: Upgrade torchserve to 0.9.0 or later.

pip install torchserve==0.9.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1972
• https://github.com/pytorch/serve/security/advisories/GHSA-m2mj-pr4f-h9jp
• https://nvd.nist.gov/vuln/detail/CVE-2023-48299
• https://github.com/pytorch/serve/pull/2634
• https://github.com/pytorch/serve/commit/bfb3d42396727614aef625143b4381e64142f9bb
• https://github.com/pytorch/serve
• https://github.com/pytorch/serve/releases/tag/v0.9.0
• https://pypi.org/project/torchserve
• https://github.com/advisories/GHSA-m2mj-pr4f-h9jp

CVE-2023-48299 · published 2026-07-07T11:45:27.310602Z · modified 2026-07-07T17:48:11.546614776Z · JSON