{"data":{"id":"dcbfb19f-9447-4e44-a34a-7c68d4d0be0a","title":"CVE-2024-56516: free-one-api allows users to access large language model reverse engineering libraries through the standard OpenAI API…","summary":"CVE-2024-56516 affects free-one-api, which exposes large language model reverse engineering libraries through the standard OpenAI API format. Versions up to and including 1.0.1 hash passwords with MD5 before sending them to the backend. Because MD5 is vulnerable to collision attacks and can be cracked on modern hardware, user credentials are exposed to potential compromise.","solution":"N/A -- no mitigation discussed in source. The source notes that, as of publication, a replacement for MD5 has not been committed to the free-one-api GitHub repository.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-56516","publishedAt":"2024-12-30T22:15:09.687Z","cveId":"CVE-2024-56516","cweIds":["CWE-328"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["free-one-api"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"free-one-api MD5 password hashing exposes user credentials","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00349,"epssCheckedAt":"2026-11-04T18:09:14.050Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:06.683Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-20"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}