CVE-2026-73678-PoC

CVE-2026-73678 — MindsDB Minds Platform Unauthenticated RCE CVSS 10.0 CVSS 10.0 Critical · CWE-94 / CWE-306 · GHSA-jcxw-h8ph-pxpv · VulnCheck Summary Minds Platform the open-source backend of mindsdb/mindshub, previously mindsdb/minds-platform exposes POST /api/v1/responses/ an OpenAI-compatible...

VLLM: Responses API Bypasses Trust_request_chat_template For Chat_template_kwargs

Summary vLLM's "/v1/responses" endpoint accepts request-level "chattemplatekwargs", but does not apply the "--trust-request-chat-template" gate that protects Chat Completions, render, tokenize, and pooling paths. When the server is run with the documented default "trustrequestchattemplate=False"...

Allocation of Resources Without Limits or Throttling

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the chat template rendering path in the Responses API endpoint, where a request-supplied...