GHSA-j5qj-rg5j-j7c2
Aim Uncontrolled Resource Consumption vulnerability
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service attack. The server overrides the maximum size for websocket messages, allowing very large images to be tracked. This causes the server to become unresponsive to other requests while processing the large image, leading to a denial of service condition.
References
External links from the advisory. They lead to third-party sites.