Approved changes feed: RSS · Atom
cpe:2.3:a:lm-sys:fastchat:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Lm Sys (539a98da-6d58-5445-b7e3-269a2e2156e7) |
|---|---|
| Product | Fastchat (3ebc0165-6484-5651-b6c2-4cd8b4fbd801) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/lm-sys/fastchat |
purl2cpe | 2026-06-01 10:11:11.757315 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6608 |
vulnerable | 2026-06-08 08:07:04.936254 |
lm-sys fastchat Arena Side-by-Side View add_text control flow
MEDIUM (5.3)
A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add_text of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was fixed in commit 34eca62 for gradio_block_arena_named.py, but three other files were missed.
Published: 2026-04-20T05:15:12.337Z
Updated: 2026-04-20T14:57:55.071Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6607 |
vulnerable | 2026-06-08 08:07:04.935785 |
lm-sys fastchat Worker API Endpoint api_generate resource consumption
MEDIUM (5.3)
A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function api_generate of the component Worker API Endpoint. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is c9e84b89c91d45191dc24466888de526fa04cf33. It is suggested to install a patch to address this issue. Commit ff66426 patched this issue in api_generate of base_model_worker.py and did miss other entry points.
Published: 2026-04-20T05:00:23.135Z
Updated: 2026-04-20T11:37:05.103Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3677 |
vulnerable | 2026-06-08 07:23:09.642528 |
lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserialization
MEDIUM (5.3)
A vulnerability classified as critical was found in lm-sys fastchat up to 0.2.36. This vulnerability affects the function split_files/apply_delta_low_cpu_mem of the file fastchat/model/apply_delta.py. The manipulation leads to deserialization. An attack has to be approached locally.
Published: 2025-04-16T08:31:04.475Z
Updated: 2025-04-21T11:28:25.222Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.