11674 matches found
Denial of Service (DoS)
Overview fschat is an An open platform for training, serving, and evaluating large language model based chatbots. Affected versions of this package are vulnerable to Denial of Service DoS through the handling of multipart boundaries. An attacker can cause excessive resource consumption and a...
GHSA-QG86-F892-M4HJ FastChat Uncontrolled Resource Consumption vulnerability
In lm-sys/fastchat Release v0.2.36, the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary. Each extra character is processed in an infinit...
Denial of Service (DoS)
Overview dbgpt is a DB-GPT is an experimental open-source project that uses localized GPT large models to interact with your data and environment. With this solution, you can beassured that there is no risk of data leakage, and your data is 100% private and secure. Affected versions of this packa...
Denial of Service (DoS)
Overview InvokeAI is an An implementation of Stable Diffusion which provides various new features and options to aid the image generation process Affected versions of this package are vulnerable to Denial of Service DoS through the multipart request boundary processing mechanism. An attacker can...
Denial of Service (DoS)
Overview hyperlpr3 is a vehicle license plate recognition. Affected versions of this package are vulnerable to Denial of Service DoS through the /api/v1/rec endpoint. An attacker can cause the server to consume excessive resources and become unavailable by appending characters, such as dashes -, ...
GHSA-6F6X-F56Q-5XGV InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`
A Denial of Service DoS vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server version v5.0.1 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries...
InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`
A Denial of Service DoS vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server version v5.0.1 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries...
Allocation of Resources Without Limits or Throttling
Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the processing of multipart boundaries in HTTP requests. An attacker can cause excessive resource consumption a...
CVE-2025-1451
A vulnerability in parisneo/lollms-webui v13 arises from the server's handling of multipart boundaries in file uploads. The server does not limit or validate the length of the boundary or the characters appended to it, allowing an attacker to craft requests with excessively long boundaries, leadi...
CVE-2024-7999
Rejected reason: REJECT DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-53981. Notes: All CVE users should reference CVE-2024-53981 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2024-10225
A vulnerability in haotian-liu/llava v1.2.0 allows an attacker to cause a Denial of Service DoS by appending a large number of characters to the end of a multipart boundary in a file upload request. This causes the server to continuously process each character, rendering the application...
CVE-2024-10650
ChuanhuChatGPT 20240918 is affected by an unauthenticated DoS vulnerability (CVE-2024-10650). An attacker can exhaust resources by sending large payloads structured around multipart boundaries, with exploitation described as grouping data in sequences (e.g., 10 characters per line, multiple lines...
CVE-2024-8736 Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui
A Denial of Service DoS vulnerability exists in multiple file upload endpoints of parisneo/lollms-webui version V12 Strawberry. The vulnerability can be exploited remotely via Cross-Site Request Forgery CSRF. Despite CSRF protection preventing file uploads, the application still processes multipa...
CVE-2024-8736 Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui
A Denial of Service DoS vulnerability exists in multiple file upload endpoints of parisneo/lollms-webui version V12 Strawberry. The vulnerability can be exploited remotely via Cross-Site Request Forgery CSRF. Despite CSRF protection preventing file uploads, the application still processes multipa...
CVE-2024-8736 Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui
A Denial of Service DoS vulnerability exists in multiple file upload endpoints of parisneo/lollms-webui version V12 Strawberry. The vulnerability can be exploited remotely via Cross-Site Request Forgery CSRF. Despite CSRF protection preventing file uploads, the application still processes multipa...
CVE-2024-8736
CVE-2024-8736 affects parisneo/lollms-webui (V12 Strawberry). The DoS arises from how multipart boundaries are processed in the /upload_avatar, /upload_app, and /upload_logo endpoints despite CSRF protections, causing resource exhaustion and possible service unavailability. Public details describ...
CVE-2024-8966 Denial of Service in gradio-app/gradio
A vulnerability in the file upload process of gradio-app/gradio version @gradio/[email protected] allows for a Denial of Service DoS attack. An attacker can append a large number of characters to the end of a multipart boundary, causing the system to continuously process each character and issue...
CVE-2024-10051 Unauthenticated Denial of Service in shaunwei/realchar
Realchar version v0.0.4 is vulnerable to an unauthenticated denial of service DoS attack. The vulnerability exists in the file upload request handling, where appending characters, such as dashes -, to the end of a multipart boundary in an HTTP request causes the server to continuously process eac...