Vulnerabilities in lm-sys

9 results

Vexday analysis

A LM-Sys apresenta um perfil de risco moderado com 9 vulnerabilidades catalogadas, sendo 1 crítica, mas nenhuma sob exploração ativa conhecida. A fraqueza dominante (CWE-918 - Server-Side Request Forgery) indica potencial para ataques direcionados à infraestrutura, embora a ausência de divulgações recentes sugira que o risco não está em escalação imediata.

CVE-2024-10908MEDIUMOpen Redirect in lm-sys/fastchatEPSS 0.8%CVE-2024-12376HIGHServer Side Request Forgery in lm-sys/fastchatEPSS 0.7%CVE-2024-11603HIGHServer-Side Request Forgery in lm-sys/fastchatEPSS 0.6%CVE-2024-10907HIGHDenial of Service (DoS) via Multipart Boundary in lm-sys/fastchatEPSS 0.6%CVE-2026-6607MEDIUMlm-sys fastchat Worker API Endpoint api_generate resource consumptionEPSS 0.6%CVE-2024-10912HIGHDenial of Service in lm-sys/fastchatEPSS 0.6%CVE-2024-10044CRITICALSSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchatEPSS 0.5%CVE-2026-6608MEDIUMlm-sys fastchat Arena Side-by-Side View add_text control flowEPSS 0.3%CVE-2025-3677MEDIUMlm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserializationEPSS 0.2%