Skip to content
Heist/ feed
Back to feed
CriticalFix available

Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service

Type: advisorySources: OSV

**Important: Exploiting this vulnerability requires the attacker to have access to your Frigate instance, which means they could also just delete all of your recordings or perform any other action. If you have configured authentication in front of Frigate via a reverse proxy, then this vulnerability is not exploitable without first getting around your authentication method. For many obvious reasons in addition to this one, please don't expose your Frigate instance publicly without any kind of authentication.** ## Summary When uploading a file or retrieving the filename, a user may intentionally use a large Unicode filename which would lead to a application-level denial of service. This is due to no limitation set on the length of the filename and the costy use of the Unicode normalization with the form NFKD under the hood of `secure_filename()`. I idenfied multiple vulnerable paths on [blakeblackshear/frigate](https://www.github.com/blakeblackshear/frigate/) repository. In all of those paths, it was possible for a malicious user to send a filename equals to the output of : `python3 -c "print('℀' * 1_000_000)"` which would reach the werkzeug `secure_filename()` call , which in turn under the hood uses a compatibility Unicode normalization with NFKC/NFKD form. In sum, the latter call would be costly in matter of CPU resource and may lead to the application-level denial of service. ## Vulnerable Paths Path with 2 steps 1. [frigate/api/media.py](https://github.com/blakeblackshear

Products
frigate
Affected versions
0.1.0, 0.2.0, 0.3.0, 0.4.0, 0.4.0a0, 0.4.0a0.post0.dev14, 0.5.0, 0.5.0a0, 0.5.0a0.post0.dev2, 0.5.0a0.post0.dev3, 0.5.0a0.post0.dev4, 0.5.0a0.post0.dev7, 0.5.0a0.post0.dev8, 0.6.0, 0.6.0a0, 0.6.0a0.post0.dev2, 0.6.0a0.post0.dev3, 0.6.0a0.post0.dev4, 0.6.1, 0.7.0, 0.7.0a0, 0.7.0a0.post0.dev1, 0.7.0a0.post0.dev32, 0.7.0a0.post0.dev34, 0.7.0a0.post0.dev37, 0.7.0a0.post0.dev38, 0.8.0a0.post0.dev39, 0.8.0a0.post0.dev40, 0.8.0a0.post0.dev41
Fixed versions
0.13.2
CVEs
CVE-2024-32874
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 18:47 UTC · Revision 1

Source evidence

Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service

core-osv · Original source

Published 9 May 2024, 15:13 UTC

**Important: Exploiting this vulnerability requires the attacker to have access to your Frigate instance, which means they could also just delete all of your recordings or perform any other action. If you have configured authentication in front of Frigate via a reverse proxy, then this vulnerability is not exploitable without first getting around your authentication method. For many obvious reasons in addition to this one, please don't expose your Frigate instance publicly without any kind of authentication.** ## Summary When uploading a file or retrieving the filename, a user may intentionally use a large Unicode filename which would lead to a application-level denial of service. This is due to no limitation set on the length of the filename and the costy use of the Unicode normalization with the form NFKD under the hood of `secure_filename()`. I idenfied multiple vulnerable paths on [blakeblackshear/frigate](https://www.github.com/blakeblackshear/frigate/) repository. In all of those paths, it was possible for a malicious user to send a filename equals to the output of : `python3 -c "print('℀' * 1_000_000)"` which would reach the werkzeug `secure_filename()` call , which in turn under the hood uses a compatibility Unicode normalization with NFKC/NFKD form. In sum, the latter call would be costly in matter of CPU resource and may lead to the application-level denial of service. ## Vulnerable Paths Path with 2 steps 1. [frigate/api/media.py](https://github.com/blakeblackshear

osv:GHSA-w4h6-9wrp-v5jq

frigate

Fixed versions: 0.13.2

Complete source record
{
  "id": "bbd571677a583509e3a5cecb14af3fe3b03ae2b74f9a5d7c1e8b2cebbd718932",
  "url": "https://osv.dev/vulnerability/GHSA-w4h6-9wrp-v5jq",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service",
    "summary": "**Important: Exploiting this vulnerability requires the attacker to have access to your Frigate instance, which means they could also just delete all of your recordings or perform any other action. If you have configured authentication in front of Frigate via a reverse proxy, then this vulnerability is not exploitable without first getting around your authentication method. For many obvious reasons in addition to this one, please don't expose your Frigate instance publicly without any kind of authentication.** ## Summary When uploading a file or retrieving the filename, a user may intentionally use a large Unicode filename which would lead to a application-level denial of service. This is due to no limitation set on the length of the filename and the costy use of the Unicode normalization with the form NFKD under the hood of `secure_filename()`. I idenfied multiple vulnerable paths on [blakeblackshear/frigate](https://www.github.com/blakeblackshear/frigate/) repository. In all of those paths, it was possible for a malicious user to send a filename equals to the output of : `python3 -c \"print('℀' * 1_000_000)\"` which would reach the werkzeug `secure_filename()` call , which in turn under the hood uses a compatibility Unicode normalization with NFKC/NFKD form. In sum, the latter call would be costly in matter of CPU resource and may lead to the application-level denial of service. ## Vulnerable Paths Path with 2 steps 1. [frigate/api/media.py](https://github.com/blakeblackshear",
    "evidence": "osv:GHSA-w4h6-9wrp-v5jq",
    "products": [
      {
        "name": {
          "value": "frigate",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.13.2",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": [
          {
            "value": "0.1.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.2.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.3.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.4.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.4.0a0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.4.0a0.post0.dev14",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.0a0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.0a0.post0.dev2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.0a0.post0.dev3",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.0a0.post0.dev4",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.0a0.post0.dev7",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.5.0a0.post0.dev8",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.6.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.6.0a0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.6.0a0.post0.dev2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.6.0a0.post0.dev3",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.6.0a0.post0.dev4",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.6.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.7.0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.7.0a0",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.7.0a0.post0.dev1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.7.0a0.post0.dev32",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.7.0a0.post0.dev34",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.7.0a0.post0.dev37",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.7.0a0.post0.dev38",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.8.0a0.post0.dev39",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.8.0a0.post0.dev40",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "0.8.0a0.post0.dev41",
            "evidence": "/affected/0/versions"
          }
        ]
      }
    ],
    "severity": "critical",
    "structured": {
      "id": "GHSA-w4h6-9wrp-v5jq",
      "aliases": [
        "CVE-2024-32874",
        "GHSA-w4h6-9wrp-v5jq",
        "PYSEC-2026-342"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0.13.2"
                }
              ]
            }
          ],
          "package": {
            "name": "frigate",
            "purl": "pkg:pypi/frigate",
            "ecosystem": "PyPI"
          },
          "versions": [
            "0.1.0",
            "0.2.0",
            "0.3.0",
            "0.4.0",
            "0.4.0a0",
            "0.4.0a0.post0.dev14",
            "0.5.0",
            "0.5.0a0",
            "0.5.0a0.post0.dev2",
            "0.5.0a0.post0.dev3",
            "0.5.0a0.post0.dev4",
            "0.5.0a0.post0.dev7",
            "0.5.0a0.post0.dev8",
            "0.6.0",
            "0.6.0a0",
            "0.6.0a0.post0.dev2",
            "0.6.0a0.post0.dev3",
            "0.6.0a0.post0.dev4",
            "0.6.1",
            "0.7.0",
            "0.7.0a0",
            "0.7.0a0.post0.dev1",
            "0.7.0a0.post0.dev32",
            "0.7.0a0.post0.dev34",
            "0.7.0a0.post0.dev37",
            "0.7.0a0.post0.dev38",
            "0.8.0a0.post0.dev39",
            "0.8.0a0.post0.dev40",
            "0.8.0a0.post0.dev41"
          ],
          "database_specific": {
            "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-w4h6-9wrp-v5jq/GHSA-w4h6-9wrp-v5jq.json"
          }
        }
      ],
      "modified": "2026-10-27T16:45:03.535811237Z",
      "provider": "osv",
      "references": [
        "https://github.com/blakeblackshear/frigate/security/advisories/GHSA-w4h6-9wrp-v5jq",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-32874",
        "https://github.com/blakeblackshear/frigate/commit/cc851555e4029647986dccc8b8ecf54afee31442",
        "https://github.com/blakeblackshear/frigate",
        "https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L1346C46-L1346C55",
        "https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L408C33-L408C78",
        "https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L646C25-L646C47",
        "https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L684C9-L684C59",
        "https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L705C42-L705C88",
        "https://github.com/blakeblackshear/frigate/blob/d7ae0eedf89e14f297093ac5c8042862034cbaeb/frigate/api/media.py#L728C38-L728C80",
        "https://github.com/pypa/advisory-database/tree/main/vulns/frigate/PYSEC-2026-342.yaml",
        "https://pypi.org/project/frigate"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-770"
        ],
        "severity": "CRITICAL",
        "github_reviewed": true,
        "nvd_published_at": "2024-05-14T15:37:13Z",
        "github_reviewed_at": "2024-05-09T15:13:49Z"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-32874",
        "evidence": "/aliases"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/database_specific/severity"
  },
  "source_id": "core-osv",
  "document_id": 462882,
  "published_at": "2024-05-09T15:13:49+00:00"
}