Vulnerabilidades em modelscope
16 resultadosAnálise Vexday
O ModelScope apresenta um perfil de risco moderado com 15 vulnerabilidades conhecidas na base, sendo 3 críticas em termos de CVSS, mas nenhuma sob exploração ativa documentada. A fraqueza dominante é CWE-918 (Server-Side Request Forgery), que representa um vetor de ataque relevante em plataformas de ML. O risco é relativamente estável, com apenas 1 divulgação nos últimos 90 dias, indicando que a superfície de exposição não está em expansão acelerada.
CVE-2024-8502CRITICALRemote Code Execution via Deserialization in modelscope/agentscopeEPSS 1.6%CVE-2026-2256MEDIUMCommand injection vulnerability in ModelScope's ms-agentEPSS 1.6%CVE-2024-8524HIGHDirectory Traversal in modelscope/agentscopeEPSS 1.2%CVE-2024-8537CRITICALPath Traversal in modelscope/agentscopeEPSS 1.0%CVE-2024-8501HIGHArbitrary File Download in modelscope/agentscopeEPSS 1.0%CVE-2024-8551CRITICALPath Traversal in modelscope/agentscopeEPSS 0.9%CVE-2024-8438HIGHPath Traversal in modelscope/agentscopeEPSS 0.7%CVE-2024-8550HIGHLocal File Inclusion (LFI) in modelscope/agentscopeEPSS 0.5%CVE-2024-8556MEDIUMStored XSS in modelscope/agentscopeEPSS 0.4%CVE-2026-6605MEDIUMmodelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgeryEPSS 0.3%CVE-2026-6603MEDIUMmodelscope agentscope _python.py execute_shell_command code injectionEPSS 0.3%CVE-2026-6606MEDIUMmodelscope agentscope _agent_base.py _process_audio_block server-side request forgeryEPSS 0.3%CVE-2026-6604MEDIUMmodelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgeryEPSS 0.3%CVE-2024-8487HIGHCORS Vulnerability in modelscope/agentscopeEPSS 0.3%CVE-2024-8489HIGHCSRF due to overly permissive CORS headers in modelscope/agentscopeEPSS 0.2%CVE-2026-10801LOWmodelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hashEPSS 0.1%