What is GHSA-fm93-g6xp-35xq?

GHSA-fm93-g6xp-35xq is a security advisory published by GitHub Security Advisories with High severity. Aim Excessive Data Query Operations in a Large Data Table vulnerability

Which CVE IDs does GHSA-fm93-g6xp-35xq cover?

GHSA-fm93-g6xp-35xq covers the following CVE IDs: CVE-2025-0190. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fm93-g6xp-35xq?

GHSA-fm93-g6xp-35xq has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-fm93-g6xp-35xq?

GHSA-fm93-g6xp-35xq affects 1 product, including: pip/aim:\u003c= 3.25.0.

GHSA-fm93-g6xp-35xqHighCVSS 7.5

Aim Excessive Data Query Operations in a Large Data Table vulnerability

Vendor

GitHub Security Advisories

Published

March 20, 2025

Last Modified

March 22, 2025

🔗 CVE IDs covered (1)

CVE-2025-0190 →

📋 Description

In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of Text objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these objects. This vulnerability can be exploited repeatedly, leading to a complete denial of service.

🎯 Affected products1

pip/aim:<= 3.25.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-0190
https://huntr.com/bounties/38d151f1-abb4-443a-86b0-6c26f0c6cb70
https://github.com/advisories/GHSA-fm93-g6xp-35xq