{"id":"CVE-2024-12761","aliases":["EUVD-2025-6996","GHSA-x5xw-28w4-53j5","PYSEC-2026-1458"],"status":"published","title":"Denial of Service in brycedrennan/imaginairy","description":"A Denial of Service (DoS) vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the `/api/stablestudio/generate` endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting `KILLED` in the terminal, and results in the unavailability of the server. This issue disrupts the server's functionality, affecting all users.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00719,"percentile":0.54392,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2025-03-20T10:08:54Z","modified":"2026-07-07T17:57:14Z","affected":[{"source":"ghsa","ecosystem":"PyPI","package":"imaginairy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"15.0.0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"imaginairy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"15.0.0"}]}],"versions":["0.7.2","0.7.3","1.0.1","1.0.2","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.2.0","1.3.0","1.4.0","1.5.1","1.5.3","1.5.4","1.6.0","1.6.1","1.6.2","10.0.0","10.0.1","10.1.0","10.1.1","10.2.0","11.0.0","11.1.0","11.1.1","12.0.0","12.0.1","12.0.2","12.0.3","13.0.0","13.0.1","13.0b0","13.1.0","13.2.0","13.2.1","14.0.0","14.0.0b1","14.0.0b2","14.0.0b3","14.0.0b4","14.0.0b5","14.0.0b6","14.0.0b7","14.0.0b8","14.0.0b9","14.0.1","14.0.2","14.0.3","14.0.4","14.1.0","14.1.1","14.2.0","14.3.0","15.0.0","2.0.0","2.0.1","2.0.2","2.0.3","2.1.0","2.2.0","2.2.1","2.3.0","2.3.1","2.4.1","3.0.0","3.0.1","4.0.0","4.1.0","5.0.0","5.0.1","5.1.0","6.0.0a0","6.1.0","6.1.1","6.1.2","7.0.0","7.1.0","7.1.1","7.2.0","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.6.0","8.0.0","8.0.1","8.0.2","8.0.3","8.0.4","8.0.5","8.1.0","8.2.0","8.3.0","8.3.1","9.0.0","9.0.1","9.0.2"]},{"source":"osv","ecosystem":"PyPI","package":"imaginairy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"15.0.0"}]}],"versions":["0.7.2","0.7.3","1.0.1","1.0.2","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.2.0","1.3.0","1.4.0","1.5.1","1.5.3","1.5.4","1.6.0","1.6.1","1.6.2","10.0.0","10.0.1","10.1.0","10.1.1","10.2.0","11.0.0","11.1.0","11.1.1","12.0.0","12.0.1","12.0.2","12.0.3","13.0.0","13.0.1","13.0b0","13.1.0","13.2.0","13.2.1","14.0.0","14.0.0b1","14.0.0b2","14.0.0b3","14.0.0b4","14.0.0b5","14.0.0b6","14.0.0b7","14.0.0b8","14.0.0b9","14.0.1","14.0.2","14.0.3","14.0.4","14.1.0","14.1.1","14.2.0","14.3.0","15.0.0","2.0.0","2.0.1","2.0.2","2.0.3","2.1.0","2.2.0","2.2.1","2.3.0","2.3.1","2.4.1","3.0.0","3.0.1","4.0.0","4.1.0","5.0.0","5.0.1","5.1.0","6.0.0a0","6.1.0","6.1.1","6.1.2","7.0.0","7.1.0","7.1.1","7.2.0","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.6.0","8.0.0","8.0.1","8.0.2","8.0.3","8.0.4","8.0.5","8.1.0","8.2.0","8.3.0","8.3.1","9.0.0","9.0.1","9.0.2"]}],"products":[{"vendor":"brycedrennan","product":"brycedrennan/imaginairy"}],"references":[{"url":"https://huntr.com/bounties/282900f4-2498-42c4-8ce7-ba5368aaf035","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12761","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-x5xw-28w4-53j5","tags":["advisory"]},{"url":"https://github.com/brycedrennan/imaginAIry","tags":["package"]},{"url":"https://pypi.org/project/imaginairy","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-12761","title":"Denial of Service in brycedrennan/imaginairy","description":"A Denial of Service (DoS) vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the `/api/stablestudio/generate` endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting `KILLED` in the terminal, and results in the unavailability of the server. This issue disrupts the server's functionality, affecting all users.","status":"published","published":"2025-03-20T10:08:54.531Z","modified":"2025-03-20T19:00:51.197Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:12.635756Z"}],"euvd":[{"id":"EUVD-2025-6996","description":"A Denial of Service (DoS) vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the `/api/stablestudio/generate` endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting `KILLED` in the terminal, and results in the unavailability of the server. This issue disrupts the server's functionality, affecting all users.","status":"published","published":"2025-03-20T10:08:54Z","modified":"2025-03-20T19:00:51Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:56.973752Z"}],"ghsa":[{"id":"GHSA-x5xw-28w4-53j5","title":"imaginAIry Denial of Service (DoS) vulnerability","description":"A Denial of Service (DoS) vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the `/api/stablestudio/generate` endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting `KILLED` in the terminal, and results in the unavailability of the server. This issue disrupts the server's functionality, affecting all users.","status":"published","published":"2025-03-20T12:32:43Z","modified":"2025-03-21T17:54:02Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:38:35.74197Z"}],"nvd":[{"id":"CVE-2024-12761","description":"A Denial of Service (DoS) vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the `/api/stablestudio/generate` endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting `KILLED` in the terminal, and results in the unavailability of the server. This issue disrupts the server's functionality, affecting all users.","status":"published","published":"2025-03-20T10:15:29.873Z","modified":"2026-06-17T07:00:26.46Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:10:45.815983Z"}],"osv":[{"id":"GHSA-x5xw-28w4-53j5","title":"imaginAIry Denial of Service (DoS) vulnerability","description":"A Denial of Service (DoS) vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the `/api/stablestudio/generate` endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting `KILLED` in the terminal, and results in the unavailability of the server. This issue disrupts the server's functionality, affecting all users.","status":"published","published":"2025-03-20T12:32:43Z","modified":"2026-07-07T17:57:14.295292047Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:59.484835Z"},{"id":"PYSEC-2026-1458","title":"imaginAIry Denial of Service (DoS) vulnerability","description":"A Denial of Service (DoS) vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the `/api/stablestudio/generate` endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting `KILLED` in the terminal, and results in the unavailability of the server. This issue disrupts the server's functionality, affecting all users.","status":"published","published":"2026-07-07T14:34:53.168435Z","modified":"2026-07-07T17:47:44.644995187Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:55.06457Z"}]}}