Mat Trudel Bandit resource management error vulnerability

Mat Trudel Bandit versions 0.3.3 through 1.14.0 contain a resource management error vulnerability. This vulnerability stems from improper handling of highly compressed data data amplification in the HTTP/2 implementation; only the size limit of compression blocks is enforced while decoding list...

CVE-2026-115825

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the...

EUVD-2026-109562

HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any data arrives, so the...

CVE-2026-116180

A flaw was found in vLLM. A remote client sharing the inference engine can trigger a Denial of Service DoS by submitting requests with prompt log probabilities enabled against a cached prefix. Because uninitialized memory is allocated for log probability tensors, cached token positions remain...

ImageMagick resource management error vulnerability

Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability stems from a lack of cleanup when using the -set profile option, potentially leading to memory leaks, resource exhaustion, and even a denial of service...

smg-project Shepherd Model Gateway resource management error vulnerability

Versions 1.7.0, 1.8.0, 1.9.0, 1.10.0, and 1.10.1 of the smg-project Shepherd Model Gateway contain a resource management error vulnerability. This vulnerability arises from improper memory allocation caused by operations on the jpegturbo::decodejpegrgb function within the file...

ImageMagick resource management error vulnerability

Versions of ImageMagick prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises because the UHDR decoder performs range checks only after decoding, allowing attackers to bypass image size restrictions and deliver specially crafted ultra-large UHDR images,...

Parse Platform Parse Server input validation error vulnerability

Versions prior to Parse Platform Parse Server 8.6.100 and versions from 9.0.0 through 9.10.4-alpha.3 contain an input validation error vulnerability. This vulnerability arises from the failure to reject writes to reserved internal field names within client objects; as a result, clients can store ...

Brain ADM-ZIP for NodeJS processing logic error vulnerability

The Brain ADM-ZIP for NodeJS versions 0.6.1 and earlier contain a logic error vulnerability stemming from improper validation of repeated entries. This flaw allows attackers to bypass readEntries checks by using valid equivalent entry names. They can then craft a ZIP archive such that getEntry or...

Edgeless Systems contrast input validation error vulnerability

Edgeless Systems version 1.21.0 prior to 1.25.0 contains an input validation error vulnerability. This flaw stems from an indeterministic flaw in registry selection within imagepuller; it prioritizes matching wildcard configuration values over specific domain names. As a result, registry...

vLLM input validation error vulnerability

Versions vLLM 0.22.0 through 0.24.0 contain an input validation error vulnerability. This flaw stems from improper input validation in the Rust gRPC converter. Remote attackers can exploit CandidateTokens.topn to bypass the maxlogprobs limit by sending Generate or GenerateStream requests containi...

Rclone input validation error vulnerability

Versions of Rclone from 1.52.0 through 1.75.2 contain an input validation error vulnerability. This vulnerability stems from the pCloud backend’s failure to verify the localhost OAuth callback status and trusting the hostname parameter. It makes the system susceptible to cross-site request forger...

vLLM resource management error vulnerability

Versions vLLM from 0.18.0 up to but not including 0.31.0 contain a resource management error vulnerability. This vulnerability arises because the API client can bypass the maximum number of video/JPEG frames by using mediaiokwargs to set numframes to -1 and uploading large inline videos. As a...

openSUSE 16 Security Update : haproxy (openSUSE-SU-2026:22162-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22162-1 advisory. This update for haproxy fixes the following issue: - h1-htx: report an error on a too long chunk-size line bsc1285046. Changes for haproxy: - Otel Updat...

AlmaLinux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792140497)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792140497 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a...

vLLM input validation error vulnerability

Versions vLLM 0.20.1 through 0.29.0 contain an input validation error vulnerability. This flaw stems from improper validation of stoptokenids. Remote attackers can exploit it by sending OpenAI chat, completion, generate, or batch requests containing invalid IDs, potentially causing the engine to...

ImageMagick processing logic error vulnerability

Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-32 contain a logic error vulnerability stemming from an incomplete fix for policy bypass issues. This allows security policy bypass, enabling attackers to circumvent configuration restrictions that would otherwise prevent certain...

vLLM input validation error vulnerability

Versions vLLM 0.22.0 through 0.24.0 contain an input validation error vulnerability. This flaw stems from Rust’s gRPC frontends failing to properly restrict logprobtokenids. Remote attackers can exploit this by sending a Generate or GenerateStream request that enables outputlogprobs and contains...

ImageMagick resource management error vulnerability

Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises from memory allocation used when processing the -cdl color decision list option without subsequent cleanup. An attacker can supply input to trigger this...

ImageMagick resource management error vulnerability

Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises because the JNG encoder fails to release allocated memory when processing specially crafted images. Attackers can exploit this by providing a specially...