HIGH 7.5 PyPI
Aim Excessive Data Query Operations in a Large Data Table vulnerability
GHSA-fm93-g6xp-35xq · CVE-2025-0190 · PYSEC-2026-1085
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of Text objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these objects. This vulnerability can be exploited repeatedly, leading to a complete denial of service.
Ready to move
Start Securing
Free, no credit card | First findings in minutes