{"data":{"ecosystem":"pypi","name":"fschat","url":"https://aisecwatch.com/packages/pypi/fschat","latestVersion":"0.2.36","firstReleaseAt":"2023-03-31T23:45:17.156Z","repository":"https://github.com/lm-sys/fastchat/issues","llm":{"exposure":"direct","depth":0,"integratedAt":"2023-04-16T13:22:48.416Z","integratedVersion":"0.2.2","sdks":["anthropic","huggingface","openai"],"path":[]},"authority":{"profile":["http"],"fromDependencies":["pypi:aiohttp","pypi:httpx","pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"accelerate","versionSpec":">=0.21","scope":"extra:model-worker"},{"ecosystem":"pypi","name":"anthropic","versionSpec":">=0.3","scope":"extra:llm-judge"},{"ecosystem":"pypi","name":"gradio","versionSpec":">=4.10","scope":"extra:webui"},{"ecosystem":"pypi","name":"openai","versionSpec":"<1","scope":"extra:llm-judge"},{"ecosystem":"pypi","name":"peft","versionSpec":null,"scope":"extra:model-worker"},{"ecosystem":"pypi","name":"transformers","versionSpec":">=4.31.0","scope":"extra:model-worker"},{"ecosystem":"pypi","name":"wandb","versionSpec":null,"scope":"extra:train"},{"ecosystem":"pypi","name":"aiohttp","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"black","versionSpec":"==23.3.0","scope":"extra:dev"},{"ecosystem":"pypi","name":"einops","versionSpec":null,"scope":"extra:train"},{"ecosystem":"pypi","name":"fastapi","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"flash-attn","versionSpec":">=2.0","scope":"extra:train"},{"ecosystem":"pypi","name":"httpx","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"markdown2","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"nh3","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"numpy","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"prompt-toolkit","versionSpec":">=3.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"protobuf","versionSpec":null,"scope":"extra:model-worker"},{"ecosystem":"pypi","name":"pydantic","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"pylint","versionSpec":"==2.8.2","scope":"extra:dev"},{"ecosystem":"pypi","name":"ray","versionSpec":null,"scope":"extra:llm-judge"},{"ecosystem":"pypi","name":"requests","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"rich","versionSpec":">=10.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"sentencepiece","versionSpec":null,"scope":"extra:model-worker"},{"ecosystem":"pypi","name":"shortuuid","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"tiktoken","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"torch","versionSpec":null,"scope":"extra:model-worker"},{"ecosystem":"pypi","name":"uvicorn","versionSpec":null,"scope":"runtime"}],"advisories":[{"id":"ecfc61b2-3cfb-455e-9718-ffdc8d4db6e7","url":"https://aisecwatch.com/issues/ecfc61b2-3cfb-455e-9718-ffdc8d4db6e7","cveId":"CVE-2026-6608","title":"CVE-2026-6608: A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function add_text of the component Arena…","headline":"lm-sys fastchat Arena side-by-side view handler flaw in add_text","severity":"medium","publishedAt":"2026-04-20T06:16:21.733Z","affected":["fschat@<= 0.2.36"],"epssScore":0.00511,"matchedBy":"ecosystem"},{"id":"21dee9d7-e35a-400b-81a3-cbd271b79b6e","url":"https://aisecwatch.com/issues/21dee9d7-e35a-400b-81a3-cbd271b79b6e","cveId":"CVE-2026-6607","title":"CVE-2026-6607: A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function…","headline":"lm-sys FastChat resource consumption in Worker API Endpoint api_generate","severity":"medium","publishedAt":"2026-04-20T05:16:16.190Z","affected":["fschat@<= 0.2.26"],"epssScore":0.00741,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-09T22:00:44.101Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}