Imartinez vulnerabilities
We track 5 vulnerabilities in Imartinez products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2025.
Latest Imartinez vulnerabilities
- 7.5 High severity
imartinez/privategpt: Allocation of Resources Without Limits or Throttling
A vulnerability in imartinez/privategpt version 0.5.0 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process these charact
- 7.5 High severity
imartinez/privategpt: Uncontrolled Resource Consumption
A Denial of Service (DoS) vulnerability exists in the file upload feature of imartinez/privategpt version v0.6.2. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sendi
- 9.8 Critical severity
imartinez/privategpt: Improper Neutralization of Special Elements used in an OS Command
A Python command injection vulnerability exists in the `SagemakerLLM` class's `complete()` method within `./private_gpt/components/llm/custom/sagemaker.py` of the imartinez/privategpt application, versions up to and including 0.3.0. The vulnerability arises du
- 7.2 High severity
imartinez/privategpt: Server-Side Request Forgery
A Server-Side Request Forgery (SSRF) vulnerability exists in the file upload section of imartinez/privategpt version 0.5.0. This vulnerability allows attackers to send crafted requests that could result in unauthorized access to the local network and potential
- 7.5 High severity
imartinez/privategpt: Improper Limitation of a Pathname to a Restricted Directory
imartinez/privategpt version 0.2.0 is vulnerable to a local file inclusion vulnerability that allows attackers to read arbitrary files from the filesystem. By manipulating file upload functionality to ingest arbitrary local files, attackers can exploit the 'Se