PT-2025-12107 · Llava · Llava

Name of the Vulnerable Software and Affected Versions: haotian-liu/llava version 1.2.0 Description: A vulnerability allows for Server-Side Request Forgery SSRF through the "/run/predict" endpoint. An attacker can gain unauthorized access to internal networks or the AWS metadata endpoint by sendin...

LLaVA 代码问题漏洞

LLaVA is an application by the individual developer Haotian Liu. A code issue vulnerability exists in LLaVA version 1.2.0, which stems from insufficient validation of path parameters and could lead to a server-side request forgery attack...

Spring AI - Multimodality - Orbis Sensualium Pictus

Humans process knowledge, simultaneously across multiple modes of data inputs. The way we learn, our experiences are all multimodal. We don't have just vision, just audio and just text. These foundational principles of learning were articulated by the father of modern education John Amos Comenius...