CVE-2025-0190

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-0190
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0190.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-0190
Aliases
Published
2025-03-20T10:08:48.087Z
Modified
2026-07-15T01:49:16.269420113Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Denial of Service in aimhubio/aim
Details

In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of Text objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these objects. This vulnerability can be exploited repeatedly, leading to a complete denial of service.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0190.json",
    "cwe_ids": [
        "CWE-1049"
    ],
    "cna_assigner": "@huntr_ai"
}
References

Affected packages

Git / github.com/aimhubio/aim

Affected ranges

Type
GIT
Repo
https://github.com/aimhubio/aim
Events
Introduced
d4ad66ac87606b1f377d3e685e861abb2eef6c45
Last affected
d4ad66ac87606b1f377d3e685e861abb2eef6c45
Database specific 
{
    "extracted_events": [
        {
            "introduced": "3.25.0"
        },
        {
            "last_affected": "3.25.0"
        }
    ],
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:aimstack:aim:3.25.0:*:*:*:*:*:*:*"
}

Affected versions

3.*
3.25.0
v3.*
v3.25.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0190.json"