Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: InternLM Component: Lmdeploy Clear all filters
TI-2026-45351 CVE-2026-63764 · GHSA-rqhf-rg9p-w5gg

LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass

Priority HIGH 73

LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, where the private-IP guard validates on…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00511 Published 2026-07-21 Fixed CWE-918
TI-2025-02763 CVE-2025-3163 · GHSA-jfvg-qm4p-473x

InternLM LMDeploy conf.py open code injection

Priority MEDIUM 55

A vulnerability was found in InternLM LMDeploy up to 0.7.1.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00381 Published 2025-04-03 No fix listed CWE-74