CVE-2024-32874
2 advisories.
PyPI/frigate CVE-2024-32874: critical 9.3, EPSS 0.77%
Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service
Action: Upgrade frigate to 0.13.2 or later.
pip install frigate==0.13.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.2 | - |
Fixed versions
| 0.13.2 |
Sources
- osv: GHSA-w4h6-9wrp-v5jq
- https://github.com/blakeblackshear/frigate/security/advisories/GHSA-w4h6-9wrp-v5jq
- https://nvd.nist.gov/vuln/detail/CVE-2024-32874
- https://github.com/blakeblackshear/frigate/commit/cc851555e4029647986dccc8b8ecf54afee31442
- https://github.com/blakeblackshear/frigate
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L1346C46-L1346C55
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L408C33-L408C78
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L646C25-L646C47
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L684C9-L684C59
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L705C42-L705C88
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L728C38-L728C80
CVE-2024-32874 · published · modified · JSON
PyPI/frigate CVE-2024-32874: critical 9.3, EPSS 0.77%
Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service
Action: Upgrade frigate to 0.13.2 or later.
pip install frigate==0.13.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.2 | - |
Fixed versions
| 0.13.2 |
Sources
- osv: PYSEC-2026-342
- https://github.com/blakeblackshear/frigate/security/advisories/GHSA-w4h6-9wrp-v5jq
- https://nvd.nist.gov/vuln/detail/CVE-2024-32874
- https://github.com/blakeblackshear/frigate/commit/cc851555e4029647986dccc8b8ecf54afee31442
- https://github.com/blakeblackshear/frigate
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L1346C46-L1346C55
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L408C33-L408C78
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L646C25-L646C47
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L684C9-L684C59
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L705C42-L705C88
- https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L728C38-L728C80
- https://pypi.org/project/frigate
- https://github.com/advisories/GHSA-w4h6-9wrp-v5jq
CVE-2024-32874 · published · modified · JSON