Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-10912
Not yet scoredAwaiting CVSS assessment
Description
A Denial of Service (DoS) vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.
lm-sys/FastChat
GitHubAn open platform for training, serving, and evaluating large language models. Release repo for Vicuna and Chatbot Arena.
GitHubAn open platform for training, serving, and evaluating large language models. Release repo for Vicuna and Chatbot Arena.= 0.2.36NVD