lm-sys

Products

ProductCVEsExploitedLatest
lm-sys/fastchat6–Mar 20, 2025
FastChat4–Sep 4, 2026

Exploited and recent CVEs

  • CVE-2026-85695 Critical 9.4 FastChat Unauthenticated Worker Registration SSRF and Model Spoofing 0.7%
  • CVE-2026-6608 Medium 5.3 lm-sys fastchat Arena Side-by-Side View add_text control flow 0.3%
  • CVE-2026-6607 Medium 5.3 lm-sys fastchat Worker API Endpoint api_generate resource consumption 0.6%
  • CVE-2025-3677 Medium 5.3 lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserialization 0.2%
  • CVE-2024-10912 High 7.5 Denial of Service in lm-sys/fastchat 0.6%
  • CVE-2024-12376 High 7.5 Server Side Request Forgery in lm-sys/fastchat 0.8%
  • CVE-2024-10907 High 7.5 Denial of Service (DoS) via Multipart Boundary in lm-sys/fastchat 0.7%
  • CVE-2024-11603 High 7.5 Server-Side Request Forgery in lm-sys/fastchat 0.7%
  • CVE-2024-10908 Medium 6.1 Open Redirect in lm-sys/fastchat 0.8%
  • CVE-2024-10044 Critical 9.3 SSRF in POST /worker_generate_stream API endpoint in lm-sys/fastchat 0.5%