Vulnerabilidades en ModelScope
18 resultadosAnálisis Vexday
ModelScope apresenta apenas 1 vulnerabilidade catalogada sem evidência de exploração ativa em cenários reais. A fraqueza identificada (CWE-77: Improper Neutralization of Special Elements) é moderada e não foi publicada recentemente, indicando risco baixo no curto prazo para usuários do fornecedor.
CVE-2024-8502CRITICALRemote Code Execution via Deserialization in modelscope/agentscopeEPSS 1.8%CVE-2026-2256MEDIUMCommand injection vulnerability in ModelScope's ms-agentEPSS 1.6%CVE-2024-8524HIGHDirectory Traversal in modelscope/agentscopeEPSS 1.2%CVE-2024-8537CRITICALPath Traversal in modelscope/agentscopeEPSS 1.0%CVE-2024-8501HIGHArbitrary File Download in modelscope/agentscopeEPSS 1.0%CVE-2024-8551CRITICALPath Traversal in modelscope/agentscopeEPSS 1.0%CVE-2024-8438HIGHPath Traversal in modelscope/agentscopeEPSS 0.8%CVE-2024-8550HIGHLocal File Inclusion (LFI) in modelscope/agentscopeEPSS 0.5%CVE-2024-8556MEDIUMStored XSS in modelscope/agentscopeEPSS 0.4%CVE-2026-84202HIGHModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config LoadingEPSS 0.4%CVE-2026-6605MEDIUMmodelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgeryEPSS 0.3%CVE-2026-6603MEDIUMmodelscope agentscope _python.py execute_shell_command code injectionEPSS 0.3%CVE-2024-8487HIGHCORS Vulnerability in modelscope/agentscopeEPSS 0.3%CVE-2026-6606MEDIUMmodelscope agentscope _agent_base.py _process_audio_block server-side request forgeryEPSS 0.3%CVE-2026-6604MEDIUMmodelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgeryEPSS 0.3%CVE-2026-85686HIGHms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLsEPSS 0.3%CVE-2024-8489HIGHCSRF due to overly permissive CORS headers in modelscope/agentscopeEPSS 0.2%CVE-2026-10801LOWmodelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hashEPSS 0.1%