694 matches found
CVE-2025-61784
LLaMA-Factory's chat API contains SSRF and LFI in the _process_request function (src/llamafactory/api/chat.py). For image_url, video_url, and audio_url, if a URL is not a base64 data URI or local file path, the code fetches the URL with requests.get(url, stream=True).raw without validation, enabl...
EUVD-2025-32903
LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure ...
CVE-2025-61784 LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities
LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure ...
CVE-2025-61784 LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities
LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure ...
LLaMA-Factory 安全漏洞
LLaMA-Factory is a fine-tuned large-scale language model by a Chinese hoshi-hiyouga individual developer. A security vulnerability exists in LLaMA-Factory versions prior to 0.9.4, which stems from the processrequest function not validating or cleaning up URLs, which could lead to server-side...
EUVD-2025-31066
Malicious code in bioql PyPI...
EUVD-2024-39638
Malicious code in bioql PyPI...
EUVD-2025-25708
Malicious code in bioql PyPI...
EUVD-2025-7043
Malicious code in bioql PyPI...
EUVD-2025-16628
Malicious code in bioql PyPI...
EUVD-2025-12156
Malicious code in bioql PyPI...
EUVD-2025-4342
Malicious code in bioql PyPI...
EUVD-2024-33149
Malicious code in bioql PyPI...
EUVD-2025-16964
Malicious code in bioql PyPI...
EUVD-2025-20207
Malicious code in bioql PyPI...
EUVD-2025-8393
Malicious code in bioql PyPI...
EUVD-2025-19200
Malicious code in bioql PyPI...
EUVD-2025-16322
Malicious code in bioql PyPI...