Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
Unbounded Remote Media Fetch and Video Frame Expansion DoS Summary The POST /v1/chat/completions endpoint in mistral.rs fetches attacker-supplied media URLs (image, audio, video) into server memory with no byte limit, and extracts every frame of a supplied video when numframes is None. An unauthenticated remote attacker can exhaust server memory, disk space, and CPU by pointing the endpoint at an infinite-streaming HTTP server or a long high-framerate video, causing a complete denial of service. No credentials or special configuration are required; the route is open by default. Details Three independent sinks contribute to the vulnerability: 1. Unbounded image/audio fetch (mistralrs-server-core/src/util.rs:59–62) bytes().await buffers the entire HTTP response body before returning. There is no Content-Length check, no streaming limit, and no timeout specific to the media fetch. An attacker-controlled server that never closes the connection causes the server process to accumulate…
Recommended action: Upgrade to 0.8.18 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
mistral.rs fetches any request-supplied image/audio URL with no host or IP validation, and opens arbitrary local files (a file:// URL, or any existing relative/absolute path). A remote, unauthenticated client of any vision/audio deployment can cause the server to issue requests to internal or cloud-metadata addresses (SSRF) and to open arbitrary local files, via the standard OpenAI imageurl / audiourl message content. The server is unauthenticated by default. Details parseimageurl in mistralrs-server-core/src/util.rs (lines 45-88) resolves the request string and fetches/opens it: reqwest::get has no allowlist, no private/loopback/link-local/metadata block, and follows redirects by default. The file scheme (and any bare path that already exists on the server, resolved at line 48) is opened and read. parseaudiourl (line 91) is identical for audiourl. The value reaches this unvalidated: mistralrs-server-core/src/chatcompletion.rs calls parseimageurl(&urlunparsed) /…
Recommended action: Upgrade to 0.8.18 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.