Miembros de
Boletines de Vulnerabilidades |
Issue with PyTorch TorchServe - CVE-2024-35198, CVE-2024-35199 |
|
| Software afectado | AmazonWS |
|
Publication Date: 2024/07/18 2:50 PM PDT AWS is aware of the issues described in CVE-2024-35198 and CVE-2024-35199 in PyTorch TorchServe versions 0.3.0 to 0.10.0. Customers using PyTorch inference Deep Learning Containers (DLC) through Amazon SageMaker are not affected. CVE-2024-35198 does not prevent a model from being downloaded into the model store if the URL contains characters such as ".." when TorchServe model registration API is called. Customers using PyTorch inference Deep More info: https://aws.amazon.com/security/security-bulletins/AWS-2024-009/ |
|
