repository icon
triton-inference-server / server Project repository

The Triton Inference Server provides an optimized cloud and edge inferencing solution.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN10 DAYS

FIX

WITHINN/A DAYS

gRPC Stream Callback Context Lifecycle Race Null Deref DoS
hombecl
self closed
gRPC Stream Callback Context Lifecycle Race Null Deref DoS in triton-inference-s...
hombecl
self closed
Arbitrary File Read via Unsanitized chat_template Path Leading to Jinja2 SSTI an...
c4rbn
duplicate
Critical
Unauthenticated Permanent Memory Leak in Sequence Batch Scheduler Backlog via UI...
linziyuu
self closed
Unauthenticated gRPC RepositoryModelLoad file: Injection Enables Python Backend...
01data-ai
self closed
Triton Shared Memory API Missing Authorization Enables Unauthenticated Status an...
01data-ai
self closed
Triton Inference Server — Path-Confusion Bypass in `IsChildPathEscapingParentPat...
s1ko
self closed
Arbitrary File Read + Jinja2 SSTI via unvalidated --chat-template path in load_c...
01data-ai
self closed
Remote Code Execution via `op_library_filename` → `dlopen()` in ONNX Runtime Bac...
wirsbf
duplicate
Critical
Unauthenticated RCE via Model Load API using Python Backend Injection
linziyuu
self closed
Remote DoS via Concurrent HTTP Decompression Bomb (Gzip)
linziyuu
self closed
SageMaker MME trusts `X-Amzn-SageMaker-Target-Model`, allowing cross-model invok...
jasanpes
pending
SageMaker MME custom invoke bypasses `--http-restricted-api=inference`, allowing...
jasanpes
pending
std::atoi silent failure and signed-to-unsigned wraparound in Content-Length par...
snakeyworm
pending
Arbitrary file write via path traversal in `file:` parameter during model load —...
snakeyworm
pending
Arbitrary file upload via unsanitized "file:" parameter in model load endpoint +...
elliottower
pending
Integer overflow via std::atoi with dead exception handling on HTTP headers acro...
wormysnake
pending
Incomplete path blocklist in SageMaker MME endpoint allows arbitrary filesystem...
wormysnake
pending
Sensitive information disclosure via verbose HTTP error responses in OpenAI-comp...
viperdroid
pending
Unauthenticated server crash via uncaught exception in SageMaker model load (emp...
kodareef5
pending
Incorrect Access Control in Vertex AI /predict allows bypass of --http-restricte...
larlarua
pending
Unauthenticated server crash (SIGSEGV) via oversized shape value in inference re...
davidaroca27
pending
SageMaker MME incomplete blocklist enables arbitrary path model loading and Pyth...
davidaroca27
pending
Unauthenticated Remote Code Execution (RCE) via Inline File Upload in Model Cont...
duonghaonika
pending
Integer overflow in shared memory bounds check and HTTP/gRPC tensor size calcula...
nhomyk
duplicate
Critical
Remote Memory Leak DoS via Compressed Request Error Path (decompressed_buffer Le...
taiphung217
pending
Remote Denial of Service via Unchecked HTTP Header
taiphung217
pending
Remote Code Execution via exec() of Unverified HTTP Response in build.py
nhomyk
pending
Integer Overflow lead to DOS in API v2/models/<model-name>/infer when handling s...
seaw1nd
duplicate
High
Unauthenticated Remote Code Execution via TRITON_BATCH_STRATEGY_PATH dlopen() Si...
yerang30
pending
Path traversal in SageMaker MME allows arbitrary filesystem read via incomplete...
elucidator-hky
duplicate
High
Arbitrary File Write via Path Traversal in file: Parameter of Model Load API
pelegs202-design
pending
Unauthenticated RCE via file: parameter in model load API allows arbitrary Pytho...
eistee82
pending
Shared Memory Key Path Traversal allows arbitrary file mapping via shm_open
narrator3333-hash
pending
gRPC Error Tracker Use-After-Free
kkent030315
pending
SageMaker Endpoint Missing Authorization — Incomplete Fix for PR #8680 → Service...
mossharris
duplicate
High
huntr: triton-inference-server/server