Advisory Catalog

Gradio Allows Unauthorized File Copy via Path Manipulation

Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution

Gradio CORS Origin Validation Bypass Vulnerability

multicast in source builds from vulnerable setuptools dependency

vLLM Tool Schema allows DoS via Malformed pattern and type Fields

vLLM allows clients to crash the openai server with invalid regex

vLLM DOS: Remotely kill vllm over http with invalid JSON schema

vLLM has a Weakness in MultiModalHasher Image Hashing Implementation

Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching

vLLM vulnerable to Regular Expression Denial of Service

vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`

LLama-Index CLI OS command injection vulnerability

Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin

Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking

pypickle Incorrect Privilege Assignment vulnerability

HumanSignal label-studio-ml-backend Deserialization of Untrusted Data vulnerability

pypickle unsafe deserialization vulnerability

A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile_3DGS_MDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. Local access is required to approach

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function MDLImporter::ImportUVCoordinate_3DGS_MDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument iIndex leads to out-of-bounds

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function LWOImporter::GetS0 in the library assimp/code/AssetLib/LWO/LWOLoader.h. The manipulation of the argument out leads to out-of-bounds read. The attac

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to out-

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::ValidateSurfaceHeader of the file assimp/code/AssetLib/MDC/MDCLoader.cpp. The manipulation of the argument pcSurface2 leads to out-of-bounds read. Attacking

docarray prototype pollution

FunAudioLLM InspireMusic deserialization vulnerability