Advisories · Technology
lm-sys FastChat.
Every CVE that names lm-sys FastChat among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
FastChat Unauthenticated Worker Registration SSRF and Model Spoofing
- lm-sys FastChat
- Authentication bypass
- CVSS 4.8 Medium
lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserialization
- lm-sys fastchat
- Insecure deserialization
- CWE-20
- CVSS 9.3 CriticalCritical · CVSS 9+
SSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchat
- lm-sys/fastchat
- Server-side request forgery (SSRF)