3458 matches found
CVE-2025-59425 vLLM vulnerable to timing attack at bearer auth
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
EUVD-2025-32853
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
CVE-2025-59425 vLLM vulnerable to timing attack at bearer auth
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
CVE-2025-59425
A flaw was found in vLLM’s API token authentication logic, where token comparisons were not performed in constant time. This weakness could allow an attacker to exploit timing differences to guess valid tokens and bypass authentication. Mitigation Mitigation for this issue is either not available...
EUVD-2015-6666
Malware in sbrugna...
EUVD-2019-18846
Malware in sbrugna...
EUVD-2021-24164
Malware in sbrugna...
EUVD-2012-5493
Malware in sbrugna...
EUVD-2018-0571
Malware in sbrugna...
EUVD-2016-5004
Malware in sbrugna...
EUVD-2021-0890
Malware in sbrugna...
EUVD-2021-0803
Malware in sbrugna...
EUVD-2020-0062
Malware in sbrugna...
EUVD-2015-0850
Malware in sbrugna...
EUVD-2011-2355
Malware in sbrugna...
EUVD-2017-1552
Malware in sbrugna...
EUVD-2016-6175
Malware in sbrugna...
EUVD-2004-2672
Malware in sbrugna...