repository icon
serge-chat / serge Project repository

A web interface for chatting with Alpaca through llama.cpp. Fully dockerized, with an easy to use API.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN35 DAYS

FIX

WITHINN/A DAYS

Path Traversal in Model Deletion Endpoint Allows Arbitrary File Deletion
toufik-airane
pending
Serge has DoS security issues
h3rrr
pending
DOS when sending multiple requests in chat
hainguyen0207
pending
CORS misconfiguration leads to data leak
srivallikusumba
informative
High
Stored XSS through Zephyr-3B chat, history chat can be shared through sent a lin...
razzhunter
duplicate
Medium
Model Endpoint Missing Authentication
mrlnstk
duplicate
High
Cross-Site Request Forgery to XSS
srivallikusumba
duplicate
High
Improper sanitization leads to stored XSS in chats
olivierlaflamme
duplicate
High
CPU exhaustion via n_threads model settings causes denial of service
olivierlaflamme
informative
Medium
CSRF allows for model download, chat creation, etc.
ethansilvas
duplicate
High
CSRF lead to delete models
fewword
duplicate
Medium
Download any model and full the memory
ranjit-git
duplicate
High
xss in chat
ranjit-git
spam
Stored XSS in module "Chat"
trunggg02
duplicate
Medium
Lack of CSRF protection
dastaj
duplicate
High
CSRF at Model Download Endpoint leads to Uncontrolled resource consumption
mnqazi
informative
High
Stored XSS in chat prompt in Serge
souadsebaa
Medium
•$50•CVE-2024-11441