Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:00:58 +0000 CVE-2024-12777 — Denial of Service in aimhubio/aim https://cve.radiocsirt.org/vuln/cve-2024-12777 <p><strong>Affected:</strong> aimhubio/aim</p> <p>A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service through the misuse of the sshfs-client. The tracking server, which is single-threaded, can be made unresponsive by requesting it to connect to an unresponsive socket via sshfs. The lack of an additional timeout setting in the sshfs-client causes the server to hang for a significant amount of time, preventing it from responding to other requests.</p> <p><strong>Affected:</strong> aimhubio/aim</p> <p>A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service through the misuse of the sshfs-client. The tracking server, which is single-threaded, can be made unresponsive by requesting it to connect to an unresponsive socket via sshfs. The lack of an additional timeout setting in the sshfs-client causes the server to hang for a significant amount of time, preventing it from responding to other requests.</p> https://cve.radiocsirt.org/vuln/cve-2024-12777 GHSA-v5pj-jrpv-h6g2 — Aim vulnerable to Synchronous Access of Remote Resource without Timeout https://cve.radiocsirt.org/vuln/ghsa-v5pj-jrpv-h6g2 <p><strong>Affected:</strong> PyPI: aim</p> <p>A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service through the misuse of the sshfs-client. The tracking server, which is single-threaded, can be made unresponsive by requesting it to connect to an unresponsive socket via sshfs. The lack of an additional timeout setting in the sshfs-client causes the server to hang for a significant amount of time, preventing it from responding to other requests.</p> <p><strong>Affected:</strong> PyPI: aim</p> <p>A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service through the misuse of the sshfs-client. The tracking server, which is single-threaded, can be made unresponsive by requesting it to connect to an unresponsive socket via sshfs. The lack of an additional timeout setting in the sshfs-client causes the server to hang for a significant amount of time, preventing it from responding to other requests.</p> https://cve.radiocsirt.org/vuln/ghsa-v5pj-jrpv-h6g2