m
modelscope
Security Risk Profile
60
/100
highSecurity Risk Score
Comprehensive risk assessment based on 16 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 4, 2024 to present
16
Total CVEs
13
Critical+High
0
Exploited
13
Unpatched
Threat Assessment
Avg CVSS
8.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
13
Critical/High
Risk Level
60/100
high
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
5High
8Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
4
2
Code Injection
3
3
SSRF
1
4
Command Injection
1
5
XSS
1
Most Affected Products
1. modelscope agentscope20
2. pip/agentscope9
3. modelscope ModelScope3
4. modelscope ms-agent1
Recent Vulnerabilities
See more →CVE-2026-84202
CVSS 8.8high
ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading
Sep 1, 2026🔧 No Patch
REDHAT-BUG-2479894
CVSS 7.0high
May 19, 2026🔧 No Patch
CVE-2025-51427
CVSS 8.1high
May 19, 2026🔧 No Patch
CVE-2026-6605
CVSS 5.5EPSS 0%medium
modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery
Apr 20, 2026🔧 No Patch
CVE-2026-2256
CVSS 6.5medium
Command injection vulnerability in ModelScope's ms-agent
Mar 2, 2026🔧 No Patch
CVE-2024-8487
CVSS 9.8critical
CORS Vulnerability in modelscope/agentscope
Mar 20, 2025🔧 No Patch
CVE-2024-8556
CVSS 6.1medium
Stored XSS in modelscope/agentscope
Mar 20, 2025🔧 No Patch
CVE-2024-8524
CVSS 7.5high
Directory Traversal in modelscope/agentscope
Mar 20, 2025🔧 No Patch
CVE-2024-8537
CVSS 9.1critical
Path Traversal in modelscope/agentscope
Mar 20, 2025🔧 No Patch
CVE-2024-8551
CVSS 9.1critical
Path Traversal in modelscope/agentscope
Mar 20, 2025🔧 No Patch
Monitor modelscope in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.