6 matches found
airoboros (2.1.1), aphrodite-engine (>=0.3.0, <=0.5.1) +30 more potentially affected by CVE-2024-11603 via fschat (>=0.2.2, <=0.2.36)
fschat PYPI version =0.2.2, =0.3.0, =0.0.1, =1.1.0, =1.1.0, =0.1.1, =0.1.1, =0.9.0.8, =1.0.0, =1.1.4 - iflow-mcp-edenyavin-garakr-mcp 0.1.0 and more Source cves: CVE-2024-11603 Source advisory: OSV:PYSEC-2026-1397...
CVE-2024-11603
A Server-Side Request Forgery SSRF vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the /queue/join? endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal...
airoboros (2.1.1), aphrodite-engine (>=0.3.0, <=0.5.1) +30 more potentially affected by CVE-2024-11603 via fschat (>=0.2.2, <=0.2.36)
fschat PYPI version =0.2.2, =0.3.0, =0.0.1, =1.1.0, =1.1.0, =0.1.1, =0.1.1, =0.9.0.8, =1.0.0, =1.1.4 - iflow-mcp-edenyavin-garakr-mcp 0.1.0 and more Source cves: CVE-2024-11603 Source advisory: OSV:GHSA-H254-G997-685C...
CVE-2024-11603
A Server-Side Request Forgery SSRF vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the /queue/join? endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal...
CVE-2024-11603 Server-Side Request Forgery in lm-sys/fastchat
A Server-Side Request Forgery SSRF vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the /queue/join? endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal...
CVE-2024-11603 Server-Side Request Forgery in lm-sys/fastchat
A Server-Side Request Forgery SSRF vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the /queue/join? endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal...