6636 matches found
H2O 资源管理错误漏洞
H2O is an in-memory platform for distributed, scalable machine learning open-sourced by H2O.ai. A resource management error vulnerability exists in H2O version 3.46.0.1, which stems from the use of a user-specified regular expression in the /3/Parse endpoint and could lead to a denial of service...
GPT Academic 资源管理错误漏洞
GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. A denial of service vulnerability exists in GPT Academic, which stems from a security issue in the file upload feature that can be exploited by an attacker to cause a denial of service...
ChuanhuChatGPT 资源管理错误漏洞
ChuanhuChatGPT is an application that provides a lightweight and easy-to-use web GUI and many additional features for a wide range of LLMs such as ChatGPT. ChuanhuChatGPT suffers from a denial of service vulnerability that stems from the use of an insecure regular expression. An attacker can...
H2O 资源管理错误漏洞
H2O is an in-memory platform for distributed, scalable machine learning open-sourced by H2O.ai. A resource management error vulnerability exists in H2O version 3.46.0.1, which stems from the runtool command exposing classes in the water.tools package via the ast parser, which could lead to a deni...
DB-GPT 资源管理错误漏洞
DB-GPT is an AWEL and agent-based AI native data application development framework open-sourced by eosphoros. A resource management error vulnerability exists in DB-GPT version v0.6.0, which stems from a flaw in the multipart request boundary handling mechanism that allows an unauthenticated user...
Lunary 资源管理错误漏洞
lunary is lunary open source a production toolkit for LLM . A denial of service vulnerability exists in lunary that stems from the use of an insecure regular expression in the compileTextTemplate function. An attacker can exploit this vulnerability to cause a denial of service...
NetEase QAnything 资源管理错误漏洞
NetEase QAnything is a local knowledge base question and answer system dedicated to supporting arbitrary format files or databases from China's NetEase NetEase, which can be installed and used offline. A resource management error vulnerability exists in NetEase QAnything version v2.0.0, which ste...
anything-llm 资源管理错误漏洞
anything-llm is an all-in-one desktop and Docker AI application open-sourced by Mintplex. A resource management error vulnerability exists in anything-llm, which stems from the fact that uploading low-sample-rate audio files may cause a site instance to crash...
Ollama 资源管理错误漏洞
Ollama is a large language model that can be started and run locally from the Ollama open source. A resource management error vulnerability exists in Ollama version 0.3.14 that stems from not properly handling gzip bomb responses, which could lead to memory exhaustion and denial of service attack...
Open WebUI 资源管理错误漏洞
Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A resource management error vulnerability exists in Open WebUI version 0.3.32, which stems from an unvalidated character length and could lead to a denial of service attack...
FastChat 资源管理错误漏洞
FastChat is an open platform from LMSYS for training, deploying and evaluating chatbots based on large language models. A resource management error vulnerability exists in FastChat version 0.2.36, which stems from improper handling of large filenames in the file upload feature and could lead to a...
Stable Diffusion web UI 资源管理错误漏洞
Stable Diffusion web UI is a web interface for AUTOMATIC1111 individual developers. A resource management error vulnerability exists in Stable Diffusion web UI version 1.10.0, which stems from the server's failure to handle excessive characters at the end of multi-part boundaries, which could lea...
GPT Academic 资源管理错误漏洞
GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a Resource Management Error vulnerability that stems from an excessive number of characters at the end of a multi-part boundary during a file upload that caus...
Danswer 资源管理错误漏洞
Danswer is Danswer AI open source an artificial intelligence assistant that connects to company documents, applications and people. A resource management error vulnerability exists in Danswer version 0.9.0, which stems from the use of a vulnerable version of the starlette package and could lead t...
Quivr 资源管理错误漏洞
Quivr is an artificial intelligence application open-sourced by Quivr. A resource management error vulnerability exists in Quivr version v0.0.298, which stems from excessive resource consumption due to multi-part boundary character appending in the file upload feature, potentially leading to a...
ImaginAIry 资源管理错误漏洞
ImaginAIry is a Pythonic AI image and video generating application by Bryce Drennan Personal Developer. A resource management error vulnerability exists in ImaginAIry version 15.0.0 that originates from an unauthenticated request and could lead to a denial of service attack...
Invoke 资源管理错误漏洞
Invoke is a leading creative engine for stabilizing diffusion models in InvokeAI open source. A resource management error vulnerability exists in Invoke v5.0.1, which stems from a flaw in the multipart request boundary handling mechanism that allows an unauthenticated user to cause a denial of...
BentoML 资源管理错误漏洞
BentoML is an open source modeling service library from BentoML Open Source. It is used to build high-performance and scalable AI applications using Python. A resource management error vulnerability exists in BentoML v1.3.4post1, which stems from not properly handling multi-part boundaries and...
Aim 资源管理错误漏洞
Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. Aim version 3.25.0 suffers from a Resource Management Error vulnerability that stems from not limiting the number of requested metrics, which could lead to a denial of service attack...