CVE-2024-8984 Denial of Service (DoS) in berriai/litellm

A Denial of Service DoS vulnerability exists in berriai/litellm version v1.44.5. This vulnerability can be exploited by appending characters, such as dashes -, to the end of a multipart boundary in an HTTP request. The server continuously processes each character, leading to excessive resource...

CVE-2024-10821 Denial of Service (DoS) in invoke-ai/invokeai

A Denial of Service DoS vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server version v5.0.1 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries...

CVE-2024-10821

CVE-2024-10821 affects the InvokeAI server (version v5.0.1). The vulnerability lies in the multipart request boundary handling, where appending excessive characters to the end of boundaries can cause an infinite loop and exhaust CPU/memory, leading to DoS on the endpoint /api/v1/images/upload . A...

CVE-2024-6838 Uncontrolled Resource Consumption in mlflow/mlflow

In mlflow/mlflow version v2.13.2, a vulnerability exists that allows the creation or renaming of an experiment with a large number of integers in its name due to the lack of a limit on the experiment name. This can cause the MLflow UI panel to become unresponsive, leading to a potential denial of...

CVE-2024-6838 Uncontrolled Resource Consumption in mlflow/mlflow

In mlflow/mlflow version v2.13.2, a vulnerability exists that allows the creation or renaming of an experiment with a large number of integers in its name due to the lack of a limit on the experiment name. This can cause the MLflow UI panel to become unresponsive, leading to a potential denial of...

CVE-2024-9340 Denial of Service (DoS) via Multipart Boundary in zenml-io/zenml

A Denial of Service DoS vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause excessive resource consumption by sending malformed multipart requests with arbitrary characters appended to the end of multipart boundaries. This flaw in the multipart request boundar...

CVE-2024-9340

ZenML vulnerability CVE-2024-9340 affects zenml-io/zenml v0.66.0. unauthenticated attackers can cause DoS by sending malformed multipart requests with extra characters at the end of multipart boundaries, triggering an infinite loop and complete denial of service. Affected endpoints include /api/v...

CVE-2024-9340 Denial of Service (DoS) via Multipart Boundary in zenml-io/zenml

A Denial of Service DoS vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause excessive resource consumption by sending malformed multipart requests with arbitrary characters appended to the end of multipart boundaries. This flaw in the multipart request boundar...

CVE-2024-10713

The CVE-2024-10713 entry concerns szad670401/hyperlpr v3.0 and describes a Denial of Service (DoS) caused by the server failing to handle excessive characters at the end of multipart boundaries. Connected documents confirm the vulnerability is triggered by malformed multipart requests with arbitr...

CVE-2024-10713 Denial of Service (DoS) via Multipart Request in szad670401/hyperlpr

A vulnerability in szad670401/hyperlpr v3.0 allows for a Denial of Service DoS attack. The server fails to handle excessive characters appended to the end of multipart boundaries, regardless of the character used. This flaw can be exploited by sending malformed multipart requests with arbitrary...

PT-2025-12276 · Zenml · Zenml

Name of the Vulnerable Software and Affected Versions: zenml version 0.66.0 Description: A Denial of Service DoS vulnerability allows unauthenticated attackers to cause excessive resource consumption by sending malformed multipart requests with arbitrary characters appended to the end of multipar...

PT-2025-12080 · Unknown · Automatic1111/Stable-Diffusion-Webui

Name of the Vulnerable Software and Affected Versions: automatic1111/stable-diffusion-webui version 1.10.0 Description: The software is susceptible to a flaw where the server does not properly manage extra characters added to the end of multipart boundaries. This can be exploited by sending...

PT-2025-12256

Name of the Vulnerable Software and Affected Versions berriai/litellm version v1.44.5 Description A Denial of Service DoS vulnerability exists. This vulnerability can be exploited by appending characters, such as dashes -, to the end of a multipart boundary in an HTTP request. The server...

PT-2025-12203 · Unknown · Imartinez/Privategpt

Name of the Vulnerable Software and Affected Versions: imartinez/privategpt version 0.5.0 Description: A Denial of Service DOS attack can be performed by appending a large number of characters to the end of a multipart boundary when uploading a file. This leads to uncontrolled resource consumptio...

PT-2025-12243 · Lunary · Lunary

Name of the Vulnerable Software and Affected Versions: lunary-ai/lunary versions be54057 and later Description: The issue allows users to upload and execute arbitrary regular expressions on the server, potentially leading to a Denial of Service DoS condition due to excessive resource consumption...

OpenShift Hive Has an Uncontrolled Resource Consumption Vulnerability

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

GHSA-C392-WRGW-JJFW OpenShift Hive Has an Uncontrolled Resource Consumption Vulnerability

A flaw was found in the Hive hibernation controller component of OpenShift Dedicated. The ClusterDeployment.hive.openshift.io/v1 resource can be created with the spec.installed field set to true, regardless of the installation status, and a positive timespan for the spec.hibernateAfter value. If ...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to netty-common-4.1.111.Final.jar CVE-2024-47535

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to netty-common-4.1.111.Final.jar CVE-2024-47535. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-47535 DESCRIPTION: Netty is an asynchronous event-driven network...

PT-2025-25591

Name of the Vulnerable Software and Affected Versions spdlog versions up to 1.15.1 Description A problematic vulnerability was found in the spdlog library, affecting the scoped padder function in the include/spdlog/pattern formatter-inl.h library. This vulnerability leads to resource consumption...

CVE-2025-27911

An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system "Event body limit bytes" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion if saved to...