Vulnerabilidades en ModelScope
16 resultadosAnálisis Vexday
ModelScope apresenta apenas 1 vulnerabilidade catalogada sem evidência de exploração ativa em cenários reais. A fraqueza identificada (CWE-77: Improper Neutralization of Special Elements) é moderada e não foi publicada recentemente, indicando risco baixo no curto prazo para usuários do fornecedor.
CVE-2024-8502CRITICALRemote Code Execution via Deserialization in modelscope/agentscopeEPSS 1.6%CVE-2026-2256MEDIUMCommand injection vulnerability in ModelScope's ms-agentEPSS 1.6%CVE-2024-8524HIGHDirectory Traversal in modelscope/agentscopeEPSS 1.2%CVE-2024-8537CRITICALPath Traversal in modelscope/agentscopeEPSS 1.0%CVE-2024-8501HIGHArbitrary File Download in modelscope/agentscopeEPSS 1.0%CVE-2024-8551CRITICALPath Traversal in modelscope/agentscopeEPSS 0.9%CVE-2024-8438HIGHPath Traversal in modelscope/agentscopeEPSS 0.7%CVE-2024-8550HIGHLocal File Inclusion (LFI) in modelscope/agentscopeEPSS 0.5%CVE-2024-8556MEDIUMStored XSS in modelscope/agentscopeEPSS 0.4%CVE-2026-6605MEDIUMmodelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgeryEPSS 0.3%CVE-2026-6603MEDIUMmodelscope agentscope _python.py execute_shell_command code injectionEPSS 0.3%CVE-2026-6606MEDIUMmodelscope agentscope _agent_base.py _process_audio_block server-side request forgeryEPSS 0.3%CVE-2026-6604MEDIUMmodelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgeryEPSS 0.3%CVE-2024-8487HIGHCORS Vulnerability in modelscope/agentscopeEPSS 0.3%CVE-2024-8489HIGHCSRF due to overly permissive CORS headers in modelscope/agentscopeEPSS 0.2%CVE-2026-10801LOWmodelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hashEPSS 0.1%