CVE-2025-0190

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of `Text` objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these objects. This vulnerability can be exploited repeatedly, leading to a complete denial of service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1049

Affected software

No affected versions have been published.

Timeline

Published: Mar 20, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-01916.5A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability CVE-2025-01925.4A stored Cross-site Scripting (XSS) vulnerability exists in the latest version of wandb/openui. The vulnerability is present in the edit HTM CVE-2025-01935.2A stored Cross-site Scripting (XSS) vulnerability exists in the MGate 5121/5122/5123 Series firmware version v1.0 because of insufficient sa CVE-2025-01946.5An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and s CVE-2025-01956.5A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. Affected by th CVE-2025-01966.5A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an u CVE-2025-01976.5A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. This vulnerability aff CVE-2025-01986.5A vulnerability, which was classified as critical, has been found in code-projects Point of Sales and Inventory Management System 1.0. This CVE-2025-01996.5A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected i CVE-2025-02006.5A vulnerability has been found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by t CVE-2025-02016.5A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this i CVE-2025-02025.5A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTS_