org.apache.camel:camel-example-cxf (>=2.10.2, <=2.10.3), org.apache.cxf.systests:cxf-systests-jaxrs (2.6.3) +9 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.6.3)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.10.2, =2.10.3 -...

org.apache.camel:camel-example-cxf (2.10.4), org.apache.cxf.systests:cxf-systests-jaxrs (2.6.6) +9 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.6.6)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.10.4 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.cxf.systests:cxf-systests-jaxrs (2.7.0), org.apache.cxf.systests:cxf-systests-transport-jms (2.7.0) +6 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.7.0)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.7.0 -...

org.apache.cxf.systests:cxf-systests-jaxrs (2.6.10), org.apache.cxf.systests:cxf-systests-transport-jms (2.6.10) +6 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.6.10)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs 2.6.10 -...

org.apache.camel:camel-example-cxf (>=2.11.4, <=2.13.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.10) +7 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.7.10)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.11.4, =2.13.0 -...

[SECURITY] Fedora 43 Update: vaultwarden-1.36.0-1.fc43

Unofficial Bitwarden compatible server...

[SECURITY] Fedora 44 Update: vaultwarden-1.36.0-1.fc44

Unofficial Bitwarden compatible server...

PYSEC-2026-2302

vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory OOM Denial of Service DoS attack due to unbounded frame count processing in the VideoMediaIO.loadbase64 method. When processing video/jpeg data URLs, the method splits the base64 data string on commas to extract individual JPEG fram...

CVE-2026-5497

vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory OOM Denial of Service DoS attack due to unbounded frame count processing in the VideoMediaIO.loadbase64 method. When processing video/jpeg data URLs, the method splits the base64 data string on commas to extract individual JPEG fram...

CVE-2026-5497

CVE-2026-5497 affects vLLM 0.8.0 and later, where VideoMediaIO.load_base64() can perform unbounded frame processing for video/jpeg data URLs, leading to an Out-of-Memory DoS. An attacker can craft a single API request with thousands of comma-separated base64 JPEG frames, causing the server to dec...

EUVD-2026-36217

vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory OOM Denial of Service DoS attack due to unbounded frame count processing in the VideoMediaIO.loadbase64 method. When processing video/jpeg data URLs, the method splits the base64 data string on commas to extract individual JPEG fram...

CVE-2026-5497

vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory OOM Denial of Service DoS attack due to unbounded frame count processing in the "VideoMediaIO.loadbase64" method. When processing "video/jpeg" data URLs, the method splits the base64 data string on commas to extract individual JPEG...

PT-2026-80324

vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory OOM Denial of Service DoS attack due to unbounded frame count processing in the VideoMediaIO.load base64 method. When processing video/jpeg data URLs, the method splits the base64 data string on commas to extract individual JPEG...

PT-2026-116297

Уязвимость функции bpf prog map compatible файла kernel/bpf/core.c ядра операционной системы Linux связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаем...

CVE-2026-9540

A flaw was found in vllm-project vllm, specifically within its OpenAI-compatible Serving Path. A remote attacker could exploit this vulnerability by manipulating certain processing, leading to a denial of service DoS. This could make the affected service unavailable to legitimate users. The issue...

vllm has Improper Resource Shutdown or Release

A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component OpenAI-compatible Serving Path. Such manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

GHSA-98F3-HWG4-4RF7 vllm has Improper Resource Shutdown or Release

A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component OpenAI-compatible Serving Path. Such manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

Improper Resource Shutdown or Release

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the OpenAI-compatible Serving Path component. An attacker can cause the service to become unavailable by...

CVE-2026-9540

A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component OpenAI-compatible Serving Path. Such manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

CVE-2026-9540 vllm-project vllm OpenAI-compatible Serving Path denial of service

A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component OpenAI-compatible Serving Path. Such manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit is publicly available and might be used...