CVE-2024-36730

HIGH

OneFlow-Inc Oneflow <0.9.1 - DoS

Title source: llm

Description

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting negative values into the oneflow.zeros/ones parameter.

References (1)

Scores

CVSS v3 7.5
EPSS 0.0022
EPSS Percentile 44.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-755
Status published

Affected Products (1)

oneflow/oneflow

Timeline

Published Jun 06, 2024
Tracked Since Feb 18, 2026