Security advisories

high2025-03-20

CVE-2024-12704-LlamaIndex Improper Handling of Exceptional Conditions vulnerability

run-llama/llama_index · GHSA-j3wr-m6xh-64hg

high2025-03-20

BentoML vulnerable to Uncontrolled Resource Consumption

bentoml/bentoml · GHSA-hh3j-9m59-p8vc

high2025-03-20

CVE-2024-12376-FastChat Server-Side Request Forgery vulnerability

lm-sys/fastchat · GHSA-g44m-hpf4-vmrp

high2025-03-20

CVE-2024-12534-Open WebUI Uncontrolled Resource Consumption vulnerability

open-webui/open-webui · GHSA-g3mx-83mp-3rwc

high2025-03-20

CVE-2024-12537-Open WebUI Uncontrolled Resource Consumption vulnerability

open-webui/open-webui · GHSA-chf7-q7m5-fq92

medium2025-03-20

CVE-2024-12720-Transformers Regular Expression Denial of Service (ReDoS) vulnerability

huggingface/transformers · GHSA-6rvg-6v2m-4j46

medium2025-03-20

BentoML Open Redirect vulnerability

bentoml/bentoml · GHSA-564p-rx2q-4c8v

high2025-03-20

CVE-2024-11602-Feast Cross-Origin Resource Sharing vulnerability

feast-dev/feast · GHSA-wxpc-2674-rxvw

high2025-03-20

CVE-2024-12215-Kedro allows Remote Code Execution by Pulling Micro Packages

kedro-org/kedro · GHSA-rm69-wvpv-r2w7

medium2025-03-20

CVE-2024-12217-Gradio Path Traversal vulnerability

gradio-app/gradio · GHSA-prpg-p95c-32fv

high2025-03-20

CVE-2024-12216-GluonCV Arbitrary File Write via TarSlip

dmlc/gluon-cv · GHSA-m724-hqmc-ggpx

high2025-03-20

CVE-2024-11603-FastChat Server-Side Request Forgery vulnerability

lm-sys/fastchat · GHSA-h254-g997-685c

high2025-03-20

CVE-2024-12055-Ollama Allows Out-of-Bounds Read

ollama/ollama · GHSA-89qx-m49c-8crf

critical2025-03-20

CVE-2024-11958- LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection

run-llama/llama_index · GHSA-339r-cjv9-x78g

high2025-03-20

CVE-2024-10907-FastChat Uncontrolled Resource Consumption vulnerability

lm-sys/fastchat · GHSA-qg86-f892-m4hj

high2025-03-20

CVE-2024-11043-InvokeAI Uncontrolled Resource Consumption vulnerability

invoke-ai/invokeai · GHSA-ffh5-w482-c7m5

high2025-03-20

CVE-2024-10912-FastChat Denial of Service vulnerability

lm-sys/fastchat · GHSA-79rp-v9rm-gxm8

medium2025-03-20

CVE-2024-10908-FastChat open redirect vulnerability

lm-sys/fastchat · GHSA-77cj-rv5x-v6r2

critical2025-03-20

CVE-2024-11041-vLLM Deserialization of Untrusted Data vulnerability

vllm-project/vllm · GHSA-5vqr-wprc-cpp7

medium2025-03-20

CVE-2024-10940-langchain-core allows unauthorized users to read arbitrary files from the host file system

langchain-ai/langchain · GHSA-5chr-fjjv-38qv