ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

agentbuddy (0.1.1.dev33), agentic-security (>=0.1.8, <=0.2.0) +206 more potentially affected by CVE-2026-48818 via starlette (0.38.6)

starlette PYPI version 0.38.6 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agentbuddy 0.1.1.dev33 - agentic-security =0.1.8, =0.0.3.155844, =0.1.0rc2, =0.1.0rc1, =0.7.5.8, =1.0.1, =5.0.0, =0.1.4, =0.1.5 and more Sour...

adapters (1.1.1), aibrix (>=0.3.0rc1, <=0.5.0rc1) +56 more potentially affected by CVE-2026-5241 via transformers (4.48.3)

transformers PYPI version 4.48.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.1.1 - aibrix =0.3.0rc1, =0.1.0.dev1, =0.2.0, =0.1.0, =0.1.0, =0.1.3, =0.1.3, =0.0.1a0, =0.1.5, =1.0.0, =1.1.4 -...

adapters (1.1.1), aibrix (>=0.3.0rc1, <=0.5.0rc1) +56 more potentially affected by CVE-2026-4372 via transformers (4.48.3)

transformers PYPI version 4.48.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.1.1 - aibrix =0.3.0rc1, =0.1.0.dev1, =0.2.0, =0.1.0, =0.1.0, =0.1.3, =0.1.3, =0.0.1a0, =0.1.5, =1.0.0, =1.1.4 -...

EUVD-2025-7450

Malicious code in bioql PyPI...

CVE-2025-1953

A vulnerability has been found in vLLM AIBrix 0.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file pkg/plugins/gateway/prefixcacheindexer/hash.go of the component Prefix Caching. The manipulation leads to insufficiently random values. The...

CVE-2025-1953

A vulnerability has been found in vLLM AIBrix 0.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file pkg/plugins/gateway/prefixcacheindexer/hash.go of the component Prefix Caching. The manipulation leads to insufficiently random values. The...

CVE-2025-1953 vLLM AIBrix Prefix Caching hash.go random values

A vulnerability has been found in vLLM AIBrix 0.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file pkg/plugins/gateway/prefixcacheindexer/hash.go of the component Prefix Caching. The manipulation leads to insufficiently random values. The...

CVE-2025-1953

CVE-2025-1953 affects vLLM AIBrix 0.2.0. The issue resides in the Prefix Caching component, specifically file pkg/plugins/gateway/prefixcacheindexer/hash.go, where manipulation leads to insufficiently random values. Public documents describe the vulnerability as having a high attack complexity an...

CVE-2025-1953 vLLM AIBrix Prefix Caching hash.go random values

A vulnerability has been found in vLLM AIBrix 0.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file pkg/plugins/gateway/prefixcacheindexer/hash.go of the component Prefix Caching. The manipulation leads to insufficiently random values. The...

CVE-2025-1953 vLLM AIBrix Prefix Caching hash.go random values

A vulnerability has been found in vLLM AIBrix 0.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file pkg/plugins/gateway/prefixcacheindexer/hash.go of the component Prefix Caching. The manipulation leads to insufficiently random values. The...

AIBrix security feature vulnerability

AIBrix is a cost-effective and pluggable infrastructure component for GenAI inference open-sourced by vLLM. AIBrix version 0.2.0 suffers from a security feature issue vulnerability that stems from the presence of an insufficient randomness issue...

CVE-2025-1953: Use of Insufficiently Random Values

A vulnerability has been found in vLLM AIBrix 0.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file pkg/plugins/gateway/prefixcacheindexer/hash.go of the component Prefix Caching. The manipulation leads to insufficiently random values. The...

PT-2025-9703

Name of the Vulnerable Software and Affected Versions vLLM AIBrix version 0.2.0 Description A vulnerability has been found in the Prefix Caching component, specifically in the file pkg/plugins/gateway/prefixcacheindexer/hash.go. This issue leads to insufficiently random values. The complexity of ...