Hliu Large Language And Vision Assistant
3 CVEs affecting Hliu Large Language And Vision Assistant. Latest disclosed: 2025-03-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12070 | High | 7.5 | 2025-03-20 | A Denial of Service (DoS) vulnerability exists in the file upload feature of haotian-liu/llava, specifically in Release v1.2.0 (LLaVA-1.6). The vulnerability i… |
CVE-2024-11449 | High | 7.5 | 2025-03-20 | A vulnerability in haotian-liu/llava version 1.2.0 (LLaVA-1.6) allows for Server-Side Request Forgery (SSRF) through the /run/predict endpoint. An attacker can… |
CVE-2024-9311 | Medium | 6.1 | 2025-03-20 | A Cross-Site Request Forgery (CSRF) vulnerability in haotian-liu/llava v1.2.0 (LLaVA-1.6) allows an attacker to upload files with malicious content without aut… |