CVE-2026-48746: Inconsistent Interpretation of HTTP Requests

vLLM is an inference and serving engine for large language models LLMs. From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware. It allows to use the API without providing t...

The vulnerability in the AuthenticationMiddleware class of the vLLM library allows attackers to bypass security restrictions and disclose sensitive information.

The vulnerability of the AuthenticationMiddleware class in the library for working with Large Language Models LLMs like vLLM is related to the use of hidden time channels for data transmission. Exploiting this vulnerability can allow an attacker to bypass security restrictions and disclose...

EUVD-2022-4642

Malicious code in bioql PyPI...

Django Improper Access Control

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

GHSA-MWV2-398H-V489 Django Improper Access Control

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

Django Improper Access Control

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

CVE-2007-0405

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

CVE-2007-0405

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

Authentication flaw

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

CVE-2007-0405

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

CVE-2007-0405

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

CVE-2007-0405

CVE-2007-0405 affects Django 0.95: the LazyUser class in AuthenticationMiddleware does not properly cache the username across requests, allowing remote authenticated users to gain the privileges of a different user. Impact and exploit details are not provided beyond this description in the suppli...