Lucene search
+L

8 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-2887

Malicious code in bioql PyPI...

6.2CVSS6.5AI score0.00233EPSS
SaveExploits0References5
osv_ghsa
osv_ghsa
•added 2024/09/17 6:33 p.m.•43 views

GHSA-WC36-9694-F9RF vLLM Denial of Service via the best_of parameter

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.9CVSS6.2AI score0.00233EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/09/17 6:33 p.m.•68 views

vLLM Denial of Service via the best_of parameter

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS6.2AI score0.00233EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2024/09/17 5:15 p.m.•41 views

CVE-2024-8939

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS0.00233EPSS
SaveExploits0References2
CVE
CVE
•added 2024/09/17 4:21 p.m.•216 views

CVE-2024-8939

CVE-2024-8939 affects the ilab model serve component, specifically the vllm JSON web API. Improper handling of the optional best_of parameter when set to a large value can exhaust resources and cause a Denial of Service, rendering the API unresponsive to legitimate users. Exploitation details in ...

6.2CVSS6.2AI score0.00233EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2024/09/17 8:41 a.m.•21 views

CVE-2024-8939

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS5.8AI score0.00233EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/09/17 12:00 a.m.•20 views

PT-2024-39324

Name of the Vulnerable Software and Affected Versions: ilab model serve component affected versions not specified Description: A vulnerability was found in the ilab model serve component, where improper handling of the best of parameter in the vllm JSON web API can lead to a Denial of Service DoS...

6.9CVSS6.2AI score0.00233EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/17 12:00 a.m.•7 views

CVE-2024-8939: Uncontrolled Resource Consumption

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS6.3AI score0.00233EPSS
SaveExploits0References1
Rows per page
Query Builder