599 matches found
CVE-2026-47630
CVE-2026-47630 — NVIDIA Triton Inference Server: arbitrary dlopen via TRITONBATCHSTRATEGYPATH Absolute path traversal in the custom batching-strategy loader of triton-inference-server/core. A model configuration parameter is passed unvalidated to dlopenRTLDNOW | RTLDLOCAL, so anyone able to...
CVE-2023-43654
CVE-2023-43654 ShellTorch is a chain of 3 Critical Vulnerabilities in PyTorch TorchServe - the default inference server of PyTorch. This is an End-to-End POC for an SSRF vulnerability which leads to Arbitrary Remote Code Execution from the network 1. Run TorchServe 0.8.1 docker run -d --rm -it -p...
cve-2026-47627
CVE-2026-47627 — NVIDIA Triton Inference Server Path Traversal → DoS Zip-Slip Complete research writeup & PoC in this repo image nvcr.io/nvidia/tritonserver:26.05-py3 / server v2.69.0. Repo is set up to always be explicit so PoC works without restart via gRPC. Table of Contents 1. CVE Summary 2...
CVE-2026-24207
CVE-2026-24207 — NVIDIA Triton SageMaker Auth Bypass to Unauth RCE Unauthenticated attackers can reach the model-management surface of NVIDIA Triton Inference Server on the SageMaker and Vertex AI HTTP ports — bypassing the operator's --http-restricted-api configuration. Combined with the SageMak...
NVIDIA Triton Inference Server Auth Bypass (CVE-2026-24207)
Exploits CVE-2026-24207 in NVIDIA Triton Inference Server = 26.02: unauthenticated access to restricted HTTP APIs including /models and model management endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """NVIDIA Triton Inference Server auth bypass CVE-2026-24207.""" import json from kittysplo...
CVE-2026-101918 vulnerabilities
Vulnerabilities for packages: awx, openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, openstack-glance-2025.2, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep,...
GHSA-42VR-XJ54-VC7V vulnerabilities
Vulnerabilities for packages: awx, openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, openstack-glance-2025.2, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep,...
GHSA-HJ66-6F7G-4R5V vulnerabilities
Vulnerabilities for packages: awx, metaflow-service, jupyterhub-k8s-singleuser-sample, openstack-keystone-2025.2-fips, datadog-agent, mlrun-fips, dagster-fips, kserve-huggingfaceserver-cuda-13.3, openstack-client-2026.1, chroma, openstack-keystone-2026.1, openstack-keystone-2025.1-fips,...
GHSA-XPV3-W29H-X7CV vulnerabilities
Vulnerabilities for packages: awx, metaflow-service, jupyterhub-k8s-singleuser-sample, openstack-keystone-2025.2-fips, datadog-agent, mlrun-fips, dagster-fips, kserve-huggingfaceserver-cuda-13.3, openstack-client-2026.1, chroma, openstack-keystone-2026.1, openstack-keystone-2025.1-fips,...
GHSA-R6X4-923Q-G947 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
GHSA-W2CX-738M-MC7W vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
CVE-2026-49264 vulnerabilities
Vulnerabilities for packages: awx, metaflow-service, jupyterhub-k8s-singleuser-sample, openstack-keystone-2025.2-fips, datadog-agent, mlrun-fips, dagster-fips, kserve-huggingfaceserver-cuda-13.3, openstack-client-2026.1, chroma, openstack-keystone-2026.1, openstack-keystone-2025.1-fips,...
CVE-2026-49265 vulnerabilities
Vulnerabilities for packages: awx, metaflow-service, jupyterhub-k8s-singleuser-sample, openstack-keystone-2025.2-fips, datadog-agent, mlrun-fips, dagster-fips, kserve-huggingfaceserver-cuda-13.3, openstack-client-2026.1, chroma, openstack-keystone-2026.1, openstack-keystone-2025.1-fips,...
GHSA-HXM8-2XGR-2P9M vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
GHSA-W6J9-CWV2-H6WQ vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
CVE-2026-102271 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
CVE-2026-102274 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
GHSA-2GX3-RCP4-G85Q vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
GHSA-P4G4-X82P-Q773 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2025.2-fips, superset-fips, openstack-manila-2025.2, openstack-placement-2026.1-fips, datadog-agent, openstack-designate-2025.2, openstack-octavia-2026.1, semgrep, kserve-huggingfaceserver-cuda-13.3,...
