2396 matches found
vLLM: undisclosed vulnerability (ZAI-2026-GPUW55)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-7JW9UI)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-2JPI59)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-WPKN8F)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-E9HBB6)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-UY8W3F)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-WQ5SVR)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-1FJWA2)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-5N92VR)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-N2WC5R)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-RNU71A)
Not disclosed. Details are not yet publicly disclosed...
TensorRT-LLM: undisclosed vulnerability (ZAI-2026-QDD5RZ)
Not disclosed. Details are not yet publicly disclosed...
Beyond Single Bugs: Benchmarking Large Language Models for Multi-Vulnerability Detection
Large Language Models LLMs have demonstrated significant potential in automated software security, particularly in vulnerability detection. However, existing benchmarks primarily focus on isolated, single-vulnerability samples or function-level classification, failing to reflect the complexity of...
CoTDeceptor:Adversarial Code Obfuscation against CoT-Enhanced LLM Code Agents
LLM-based code agentse.g., ChatGPT Codex are increasingly deployed as detector for code review and security auditing tasks. Although CoT-enhanced LLM vulnerability detectors are believed to provide improved robustness against obfuscated malicious code, we find that their reasoning chains and...
serverless-llm-store (0.5.0), turbo-alignment (0.0.2) potentially affected by CVE-2025-14929 via transformers (4.42.0)
transformers PYPI version 4.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - serverless-llm-store 0.5.0 - turbo-alignment 0.0.2 Source cves: CVE-2025-14929 Source advisory: OSV:PYSEC-2025-217...
alignment-handbook (0.1.0), geniebottle (0.0.3) +7 more potentially affected by CVE-2025-14929 via transformers (4.37.1)
transformers PYPI version 4.37.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - alignment-handbook 0.1.0 - geniebottle 0.0.3 - llm-docstring-generator 1.0.0 - lmdeploy =0.2.3, =0.0.2, =0.0.6, =0.0.7 - video2dataset...
amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2025-14929 via transformers (4.52.1)
transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...
CVE-2025-14148
IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token...
CVE-2025-14148
IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token...
CVE-2025-14148
CVE-2025-14148 affects IBM UCD - IBM DevOps Deploy versions 8.1 through 8.1.2.3. An authenticated user with LLM integration configuration privileges can recover a previously saved LLM API Token, exposing credentials. Root cause identified as insufficiently protected credentials (CWE-522). CVSSv3....