mistralrs-server-core — mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS

Servers exposing POST /v1/chat/completions to attacker-supplied media URLs are exposed to denial of service.

Unbounded Remote Media Fetch and Video Frame Expansion DoS Summary The POST /v1/chat/completions endpoint in mistral.rs fetches attacker-supplied media URLs (image, audio, video) into server memory with no byte limit, and extracts every frame of a supplied…