TI-2024-10115 CVE-2024-10912 · GHSA-79rp-v9rm-gxm8
Denial of Service in lm-sys/fastchat
Priority HIGH 72
A Denial of Service (DoS) vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36.
Vulnerabilities
6 records
TI-2024-11482 CVE-2024-12376 · GHSA-g44m-hpf4-vmrp
Server Side Request Forgery in lm-sys/fastchat
Priority HIGH 72
A Server-Side Request Forgery (SSRF) vulnerability was identified in the lm-sys/fastchat web server, specifically in the affected version git 2c68a13.
TI-2024-10111 CVE-2024-10907 · GHSA-qg86-f892-m4hj
Denial of Service (DoS) via Multipart Boundary in lm-sys/fastchat
Priority HIGH 72
In lm-sys/fastchat Release v0.2.36, the server fails to handle excessive characters appended to the end of multipart boundaries.
TI-2024-10750 CVE-2024-11603 · GHSA-h254-g997-685c
Server-Side Request Forgery in lm-sys/fastchat
Priority HIGH 72
A Server-Side Request Forgery (SSRF) vulnerability exists in lm-sys/fastchat version 0.2.36.
TI-2024-10112 CVE-2024-10908 · GHSA-77cj-rv5x-v6r2
Open Redirect in lm-sys/fastchat
Priority MEDIUM 60
An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL.
TI-2024-09320 CVE-2024-10044 · GHSA-h6qm-w442-h848
SSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchat
Priority HIGH 79
A Server-Side Request Forgery (SSRF) vulnerability exists in the POST /worker_generate_stream API endpoint of the Controller API Server in lm-sys/fastchat, as of commit e208d5677c6837d590b81cb03847c0b9de100765.