Hliu Llava
5 CVEs affecting Hliu Llava. Latest disclosed: 2025-03-20. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-9309 | Critical | 9.3 | 2025-03-20 | A Server-Side Request Forgery (SSRF) vulnerability exists in the POST /worker_generate_stream API endpoint of the Controller API Server in haotian-liu/llava ve… |
CVE-2024-12068 | High | 7.5 | 2025-03-20 | A Server-Side Request Forgery (SSRF) vulnerability was discovered in haotian-liu/llava, affecting version git c121f04. This vulnerability allows an attacker to… |
CVE-2024-12065 | High | 7.5 | 2025-03-20 | A local file inclusion vulnerability exists in haotian-liu/llava at commit c121f04. This vulnerability allows an attacker to access any file on the system by s… |
CVE-2024-10225 | High | 7.5 | 2025-03-20 | A vulnerability in haotian-liu/llava v1.2.0 allows an attacker to cause a Denial of Service (DoS) by appending a large number of characters to the end of a mul… |
CVE-2024-9308 | Medium | 6.1 | 2025-03-20 | An open redirect vulnerability in haotian-liu/llava version v1.2.0 (LLaVA-1.6) allows a remote unauthenticated attacker to redirect users to arbitrary websites… |