Advisory Catalog

vm2 contains a sandbox escape vulnerability

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that poison

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

virtualenv bash and fish activation scripts execute commands embedded in paths

virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

virtualenv: Command injection via --prompt in activate.bat (batch activator)

vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with max_tokens=0 to exhaust decode-worker memory without bound until the worker restarts.

Acronis Backup Incorrect Default Permissions Vulnerability

Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text

djust: A template binding inherits a context safety grant it never earned (XSS)

djust: Six template-layer defects emit attacker-controlled markup unescaped (XSS)

Jupyter Server: 5xx request logging leaks token-bearing Referer header values

Chamilo LMS CStudio upload flow allows unauthenticated remote code execution

virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection

libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns

Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)

ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion

CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection