invokeai-consumer

invokeai-consumer 演示消费者应用，固定使用 invokeai==5.0.1——被 Endor Labs 用于演示针对上游 invokeai 库的漏洞检测和利用链分析。v5.0.1 是源 CVE（CVE-2024-10821）中指定的特定版本。...

invokeai

invokeai 这是一个用于 Endor Labs EXPOSURE 的 合成演示目标 。 当前状态是 故意存在漏洞的 （HOT）。EXPOSURE 将报告一个 HOT 结论。 跟踪的 CVE：CVE-2024-10821（没有上游修复；仅通过补偿控制缓解）。 EXPOSURE 打开的一个演示 PR 会将规范配置文件替换为强化变体，从而打破漏洞利用链—— 无需 升级易受攻击的依赖项。 客户应用修复的工作量是 一次点击 （审核 + 合并）。 此仓库不是生产应用程序。它仅用于锚定 EXPOSURE “点击 → 打开真实 PR” 演示针对一个真实 GitHub 仓库。...

CVE-2024-10821

creationtimestamp| type| source ---|---|--- 2026-05-20 03:00:06+00:00| published-proof-of-concept| Telegram/xh4XcnfPk8jKp2qpT8jzWwwvaCwZdGZH1ZOpAikcTE7X2rw 2026-05-20 09:00:05+00:00| published-proof-of-concept| Telegram/zNPCcRZLVUnG7MzXxuguKud9BYCf7Gj51sr3J84x37QbILk...

CVE-2024-10821

A Denial of Service DoS vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server version v5.0.1 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries...

CVE-2024-10821 Denial of Service (DoS) in invoke-ai/invokeai

A Denial of Service DoS vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server version v5.0.1 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries...

CVE-2024-10821 Denial of Service (DoS) in invoke-ai/invokeai

A Denial of Service DoS vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server version v5.0.1 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries...