Product
The Michael-A-Kuykendall Shimmy Inference API contains a missing authentication vulnerability in src/server.rs that permits unauthenticated remote access, resolved in version 2.6.5.