StackRadar

CVE-2024-48063

Critical

Advisory

Published 29 Oct 2024In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.016
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
11
of 17,781 indexed, latest versions
Container images
10
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 10 images.

Affected packageAffected versionsFixed inImages
torchpypi2.2.2+cpu, 2.4.1+cpu2.5.010
OSV records
PYSEC-2024-259
Also known as
BIT-pytorch-2024-48063

Charts affected

11 by stars
ChartLatestAffected imagesRadar Score
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2024-48063.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
torch@2.2.2+cpu
2.5.0

Open the chart page →

17,245
asrtest-opea1.0.01 of 1See more

asr test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-48063.

Container imageDigestPackageFixed in
opea/asr:1.025dd26d9cd09
torch@2.4.1+cpu
2.5.0

Open the chart page →

4,393
chatqnatest-opea1.0.03 of 11See more

chatqna test-opea 1.0.0

3 of the 11 container images this version deploys carry CVE-2024-48063.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
torch@2.4.1+cpu
2.5.0
opea/reranking-tei:1.0e48613afb191
torch@2.4.1+cpu
2.5.0
opea/retriever-redis:1.0eb746b263705
torch@2.4.1+cpu
2.5.0

Open the chart page →

39,090
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-48063.

Container imageDigestPackageFixed in
opea/llm-docsum-tgi:1.002f9e8fa5d71
torch@2.4.1+cpu
2.5.0

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-48063.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
torch@2.4.1+cpu
2.5.0

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-48063.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
torch@2.4.1+cpu
2.5.0

Open the chart page →

5,221
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-48063.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
torch@2.4.1+cpu
2.5.0

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-48063.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
torch@2.4.1+cpu
2.5.0

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-48063.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
torch@2.4.1+cpu
2.5.0

Open the chart page →

9,616
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-48063.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
torch@2.4.1+cpu
2.5.0

Open the chart page →

4,377
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-48063.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
torch@2.4.1+cpu
2.5.0

Open the chart page →

5,350

Container images carrying it

10 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
opea/embedding-tei:1.05c9639de61c1
torch@2.4.1+cpu
2.5.0
2
opea/reranking-tei:1.0e48613afb191
torch@2.4.1+cpu
2.5.0
2
opea/retriever-redis:1.0eb746b263705
torch@2.4.1+cpu
2.5.0
2
opea/asr:1.025dd26d9cd09
torch@2.4.1+cpu
2.5.0
1
opea/guardrails-tgi:1.0262c6048aab8
torch@2.4.1+cpu
2.5.0
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
torch@2.4.1+cpu
2.5.0
1
opea/speecht5:1.0249afad3d268
torch@2.4.1+cpu
2.5.0
1
opea/tts:1.0257ae94709e9
torch@2.4.1+cpu
2.5.0
1
opea/web-retriever-chroma:1.0fe08165d7770
torch@2.4.1+cpu
2.5.0
1
openmined/syft-backend:0.9.5b72f74a68b32
torch@2.2.2+cpu
2.5.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.