From 3856ffdbd0a6a00a04204c8628363fd78c8fa4fb Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 21 Mar 2025 17:55:34 +0000 Subject: [PATCH] Publish GHSA-x5xw-28w4-53j5 --- .../GHSA-x5xw-28w4-53j5.json | 33 ++++++++++++++++--- 1 file changed, 29 insertions(+), 4 deletions(-) rename advisories/{unreviewed => github-reviewed}/2025/03/GHSA-x5xw-28w4-53j5/GHSA-x5xw-28w4-53j5.json (63%) diff --git a/advisories/unreviewed/2025/03/GHSA-x5xw-28w4-53j5/GHSA-x5xw-28w4-53j5.json b/advisories/github-reviewed/2025/03/GHSA-x5xw-28w4-53j5/GHSA-x5xw-28w4-53j5.json similarity index 63% rename from advisories/unreviewed/2025/03/GHSA-x5xw-28w4-53j5/GHSA-x5xw-28w4-53j5.json rename to advisories/github-reviewed/2025/03/GHSA-x5xw-28w4-53j5/GHSA-x5xw-28w4-53j5.json index daaac342b94..149cdba60ac 100644 --- a/advisories/unreviewed/2025/03/GHSA-x5xw-28w4-53j5/GHSA-x5xw-28w4-53j5.json +++ b/advisories/github-reviewed/2025/03/GHSA-x5xw-28w4-53j5/GHSA-x5xw-28w4-53j5.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-x5xw-28w4-53j5", - "modified": "2025-03-20T12:32:43Z", + "modified": "2025-03-21T17:54:02Z", "published": "2025-03-20T12:32:43Z", "aliases": [ "CVE-2024-12761" ], + "summary": "imaginAIry Denial of Service (DoS) vulnerability", "details": "A Denial of Service (DoS) vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the `/api/stablestudio/generate` endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting `KILLED` in the terminal, and results in the unavailability of the server. This issue disrupts the server's functionality, affecting all users.", "severity": [ { @@ -13,12 +14,36 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "imaginAIry" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "15.0.0" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12761" }, + { + "type": "PACKAGE", + "url": "https://github.com/brycedrennan/imaginAIry" + }, { "type": "WEB", "url": "https://huntr.com/bounties/282900f4-2498-42c4-8ce7-ba5368aaf035" @@ -29,8 +54,8 @@ "CWE-400" ], "severity": "HIGH", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2025-03-21T17:54:02Z", "nvd_published_at": "2025-03-20T10:15:29Z" } } \ No newline at end of file