20538 matches found
EUVD-2026-37198
stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. In versions prior to master-584-0a7ae07, the pickle .ckpt parser in src/model.cpp contained a heap buffer overflow vulnerability in the GLOBAL opcode...
CVE-2026-53859
Technical details (affected components, root cause, specific versions, exploitation) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-53859 OpenClaw < 2026.5.26 - Hostname Validation Bypass via Trailing-Dot Inconsistency
OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparisons using trailing-dot notation in model or workspace-derived URLs. Attackers can exploit inconsistent hostname checks to reach destinations that operators intended to block throu...
MINI-52XR-MHPW-8855
Bulletin has no description...
MINI-VG52-944R-4MPH
Bulletin has no description...
MINI-22V2-G977-H32V
Bulletin has no description...
MINI-PPQX-255M-4R88
Bulletin has no description...
MINI-HWQP-R88P-M22X
Bulletin has no description...
MINI-MM9F-X364-FGF3
Bulletin has no description...
vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution
Summary An assert-based security check in vLLM's activation function loading allows any unauthenticated attacker to achieve arbitrary code execution on the server by publishing a malicious HuggingFace model, when vLLM runs in Python optimized mode python -O or PYTHONOPTIMIZE=1. Details vLLM uses ...
GHSA-Q8GQ-377P-JQ3R vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution
Summary An assert-based security check in vLLM's activation function loading allows any unauthenticated attacker to achieve arbitrary code execution on the server by publishing a malicious HuggingFace model, when vLLM runs in Python optimized mode python -O or PYTHONOPTIMIZE=1. Details vLLM uses ...
MINI-P58W-MC48-QV42
Bulletin has no description...
MINI-Q25C-27W4-69P2
Bulletin has no description...
MINI-8635-MC5P-QQMG
Bulletin has no description...
MINI-6C26-3PRG-6PWM
Bulletin has no description...
MINI-882V-6WC2-VFFW
Bulletin has no description...
MINI-X8VF-5G5F-JVG6
Bulletin has no description...
fast-model-server (1.1.0.0), idoctorai (>=0.3.1, <=0.6.9) +1 more potentially affected by CVE-2026-55443 via langchain (0.0.194)
langchain PYPI version 0.0.194 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - fast-model-server 1.1.0.0 - idoctorai =0.3.1, =0.6.9 - langflow 0.0.88 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...
