HIGH7.5

PYSEC-2026-1458

imaginAIry Denial of Service (DoS) vulnerability

Details

A Denial of Service (DoS) vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the `/api/stablestudio/generate` endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting `KILLED` in the terminal, and results in the unavailability of the server. This issue disrupts the server's functionality, affecting all users.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/imaginairy

Introduced in: 0

No fixed version published yet for imaginairy (pip). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-12761[ADVISORY]
https://github.com/brycedrennan/imaginAIry[PACKAGE]
https://huntr.com/bounties/282900f4-2498-42c4-8ce7-ba5368aaf035[WEB]
https://pypi.org/project/imaginairy[PACKAGE]
https://github.com/advisories/GHSA-x5xw-28w4-53j5[ADVISORY]