373 matches found
CVE-2025-59425
CVE-2025-59425 affects vLLM prior to 0.11.0rc2, where API key validation used a string comparison that leaks timing information. Attackers observing responses over many attempts could determine the next correct character in the API key, enabling authentication bypass. The issue is resolved in ver...
EUVD-2025-32853
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
EUVD-2021-27058
Malware in sbrugna...
EUVD-2014-9560
Malware in sbrugna...
EUVD-2014-9561
Malware in sbrugna...
EUVD-2020-0067
Malware in sbrugna...
EUVD-2021-19510
Malware in sbrugna...
EUVD-2003-0250
Malware in sbrugna...
EUVD-2011-3338
Malware in sbrugna...
EUVD-2015-1567
Malware in sbrugna...
EUVD-2018-0591
Malware in sbrugna...
EUVD-2005-1507
Malware in sbrugna...
EUVD-2019-18529
Malware in sbrugna...
CVE-2025-59425: Covert Timing Channel
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
EUVD-2025-13015
Malicious code in bioql PyPI...
EUVD-2025-19627
Malicious code in bioql PyPI...
EUVD-2025-29164
Malicious code in bioql PyPI...
EUVD-2024-42883
Malicious code in bioql PyPI...