GHSA-35p3-6j45-prwm · Severity: high · Ecosystem: pip — Aim Uncontrolled Resource Consumption vulnerability
A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service (DoS) attack. The issue arises when a large number of tracked metrics are retrieved simultaneously from the Aim web API, causing the web server to become unresponsive. The root cause is the lack of a limit on the number of metrics that can be requested per call, combined with the server's single-threaded nature, leading to excessive resource consumption and blocking of the server.
Conclusion & alert: CVE-2024-12778 is rated High Exploit Risk (67/100): CVSS High severity, with medium exploitation likelihood (EPSS 0.42%). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
| EDB-ID | Source | Kind | Published | Link |
|---|---|---|---|---|
| — | nvd_ref | exploit_tag | Exploit-DB ↗ |
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-04-28 | 0.14% | 0.42% | +0.28% |
| 2 | 2025-12-04 | 0.15% | 0.14% | -0.01% |
| 3 | 2025-11-23 | — | 0.15% | — |
Full EPSS history (11 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 7.5 | 3.0 | HIGH |
|
3.9 | 3.6 | [email protected] |
GHSA-35p3-6j45-prwm · Severity: high · Ecosystem: pip — Aim Uncontrolled Resource Consumption vulnerability
| URL | Tags |
|---|---|
| https://huntr.com/bounties/892a9eee-0251-4e57-94a4-dad2e7f32715 | Exploit Third Party Advisory |