{"items":[{"id":"CVE-2026-85686","published":"2026-09-04T14:32:31.724Z","updated":"2026-09-10T15:07:43.973Z","title":"ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs","severity":"HIGH","score":8.7,"vendor":"modelscope","product":"ms-swift","kev":false,"epss":0.00483,"kevAdded":null},{"id":"CVE-2026-84202","published":"2026-09-01T15:18:57.372Z","updated":"2026-09-01T17:37:34.765Z","title":"ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading","severity":"HIGH","score":8.7,"vendor":"modelscope","product":"modelscope","kev":false,"epss":0.00682,"kevAdded":null},{"id":"CVE-2026-10801","published":"2026-06-04T11:00:13.074Z","updated":"2026-06-04T12:44:47.466Z","title":"modelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hash","severity":"LOW","score":2,"vendor":"modelscope","product":"ms-swift","kev":false,"epss":0.00075,"kevAdded":null},{"id":"CVE-2026-6606","published":"2026-04-20T04:45:11.806Z","updated":"2026-04-20T16:07:08.458Z","title":"modelscope agentscope _agent_base.py _process_audio_block server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"modelscope","product":"agentscope","kev":false,"epss":0.00284,"kevAdded":null},{"id":"CVE-2026-6605","published":"2026-04-20T04:30:13.482Z","updated":"2026-04-20T14:58:30.070Z","title":"modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"modelscope","product":"agentscope","kev":false,"epss":0.00326,"kevAdded":null},{"id":"CVE-2026-6604","published":"2026-04-20T04:15:11.588Z","updated":"2026-04-20T13:53:04.341Z","title":"modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgery","severity":"MEDIUM","score":6.9,"vendor":"modelscope","product":"agentscope","kev":false,"epss":0.00284,"kevAdded":null},{"id":"CVE-2026-6603","published":"2026-04-20T04:00:20.462Z","updated":"2026-04-20T14:59:13.475Z","title":"modelscope agentscope _python.py execute_shell_command code injection","severity":"MEDIUM","score":6.9,"vendor":"modelscope","product":"agentscope","kev":false,"epss":0.00311,"kevAdded":null},{"id":"CVE-2026-2256","published":"2026-03-02T20:09:11.808Z","updated":"2026-03-03T20:07:24.775Z","title":"Command injection vulnerability in ModelScope's ms-agent","severity":"MEDIUM","score":6.5,"vendor":"ModelScope","product":"ms-agent","kev":false,"epss":0.01701,"kevAdded":null},{"id":"CVE-2024-8487","published":"2025-03-20T10:11:26.563Z","updated":"2025-03-20T13:04:47.063Z","title":"CORS Vulnerability in modelscope/agentscope","severity":"HIGH","score":7.4,"vendor":"modelscope","product":"modelscope/agentscope","kev":false,"epss":0.00295,"kevAdded":null},{"id":"CVE-2024-8556","published":"2025-03-20T10:11:21.587Z","updated":"2025-03-20T13:05:54.203Z","title":"Stored XSS in modelscope/agentscope","severity":"MEDIUM","score":6.1,"vendor":"modelscope","product":"modelscope/agentscope","kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2024-8524","published":"2025-03-20T10:11:18.458Z","updated":"2025-10-15T12:50:40.766Z","title":"Directory Traversal in modelscope/agentscope","severity":"HIGH","score":7.5,"vendor":"modelscope","product":"modelscope/agentscope","kev":false,"epss":0.01186,"kevAdded":null},{"id":"CVE-2024-8537","published":"2025-03-20T10:11:00.318Z","updated":"2025-03-20T18:14:22.708Z","title":"Path Traversal in modelscope/agentscope","severity":"CRITICAL","score":9.1,"vendor":"modelscope","product":"modelscope/agentscope","kev":false,"epss":0.0104,"kevAdded":null},{"id":"CVE-2024-8551","published":"2025-03-20T10:10:21.361Z","updated":"2025-10-15T12:50:41.115Z","title":"Path Traversal in modelscope/agentscope","severity":"CRITICAL","score":9.1,"vendor":"modelscope","product":"modelscope/agentscope","kev":false,"epss":0.01022,"kevAdded":null},{"id":"CVE-2024-8438","published":"2025-03-20T10:09:49.971Z","updated":"2025-03-20T18:34:01.364Z","title":"Path Traversal in modelscope/agentscope","severity":"HIGH","score":7.5,"vendor":"modelscope","product":"modelscope/agentscope","kev":false,"epss":0.00772,"kevAdded":null},{"id":"CVE-2024-8502","published":"2025-03-20T10:09:38.825Z","updated":"2025-03-20T18:36:22.032Z","title":"Remote Code Execution via Deserialization in modelscope/agentscope","severity":"CRITICAL","score":9.8,"vendor":"modelscope","product":"modelscope/agentscope","kev":false,"epss":0.01844,"kevAdded":null},{"id":"CVE-2024-8489","published":"2025-03-20T10:09:26.333Z","updated":"2025-03-20T18:54:47.412Z","title":"CSRF due to overly permissive CORS headers in modelscope/agentscope","severity":"HIGH","score":8.8,"vendor":"modelscope","product":"modelscope/agentscope","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2024-8501","published":"2025-03-20T10:08:44.723Z","updated":"2025-03-20T14:46:18.305Z","title":"Arbitrary File Download in modelscope/agentscope","severity":"HIGH","score":7.5,"vendor":"modelscope","product":"modelscope/agentscope","kev":false,"epss":0.01022,"kevAdded":null},{"id":"CVE-2024-8550","published":"2025-02-10T18:50:01.038Z","updated":"2025-02-10T23:20:32.284Z","title":"Local File Inclusion (LFI) in modelscope/agentscope","severity":"HIGH","score":7.5,"vendor":"modelscope","product":"modelscope/agentscope","kev":false,"epss":0.0052,"kevAdded":null}]}