DoS via large board_name in invoke-ai/invokeai 5.0.2
Date: 2024
Affected: invoke-ai/invokeai 5.0.2
Attack vector: dos
Category: vulnerability-disclosure
Severity: Medium

DoS in invoke-ai/invokeai v5.0.2 /boards/{board_id} PATCH endpoint when an excessively large payload is sent in the board_name field.


Mitigations:

Architectural layers (MAESTRO):