GHSA-HXXF-235M-72V3 vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-WRFC-PVP9-MR9G vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-QXRP-VHVM-J765 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2024-11394 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2024-11393 vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2024-11392 vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-8495-4G3G-X7PR vulnerabilities

Vulnerabilities for packages: py3-aiohttp, dask-gateway, kserve, request-1276, airflow, awx, checkov, py3-cassandra-medusa, py3.13-scanner-test-libraries-aiohttp...

GHSA-27MF-GHQM-J3J8 vulnerabilities

Vulnerabilities for packages: checkov, py3-aiohttp, airflow...

CVE-2024-47874 vulnerabilities

Vulnerabilities for packages: reflex...

Denial Of Service (DoS)

vllm is vulnerable to Denial of Service DoS. The vulnerability is due to the improper handling of the bestof parameter, which fails to manage timeouts or resource exhaustion properly, allowing an attacker to overwhelm the system...

vLLM Denial of Service via the best_of parameter

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

GHSA-WC36-9694-F9RF vLLM Denial of Service via the best_of parameter

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

GHSA-W2R7-9579-27HF vLLM denial of service vulnerability

A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service...

vLLM denial of service vulnerability

A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service...

CVE-2024-8768

A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service...

CVE-2024-8939

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

CVE-2024-8939

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

CVE-2024-8939 Vllm: denials of service in vllm json web api

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

CVE-2024-8939 Vllm: denials of service in vllm json web api

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

CVE-2024-8939

CVE-2024-8939 affects the ilab model serve component, specifically the vllm JSON web API. Improper handling of the optional best_of parameter when set to a large value can exhaust resources and cause a Denial of Service, rendering the API unresponsive to legitimate users. Exploitation details in ...