MINI-477V-827Q-9678

Bulletin has no description...

MINI-XVP6-MM64-QG45

Bulletin has no description...

MINI-W2CV-645X-8587

Bulletin has no description...

MINI-P9V2-6FVM-X5P9

Bulletin has no description...

MINI-JP94-47MX-MGQC

Bulletin has no description...

MINI-J98V-CPMG-PG2V

Bulletin has no description...

MINI-HXHW-P58C-CRGC

Bulletin has no description...

MINI-G6FM-27V3-8H5V

Bulletin has no description...

MINI-FRR9-62V2-57G9

Bulletin has no description...

MINI-878G-CH64-MWGV

Bulletin has no description...

MINI-Q339-G3PH-8526

Bulletin has no description...

GHSA-P58C-Q354-6C4F pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities

Local file inclusion LFI and server-side request forgery SSRF vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied apikeyfile and apiurl preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by...

EUVD-2026-29099

CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e 2025-30-21 contains an insecure deserialization vulnerability CWE-502 in its model loading component. The framework uses torch.load to load model weight files e.g., llm.pt, flow.pt, hift.pt without enabling the security-restrictive...

EUVD-2026-29097

CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e 2025-30-21 contains an insecure deserialization vulnerability CWE-502 in its averagemodel.py model averaging tool. The script loads PyTorch checkpoint files epoch.pt for model averaging using torch.load without enabling the...

MINI-V3PH-6P34-VRHC

Bulletin has no description...

CVE-2026-31252

CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e 2025-30-21 contains an insecure deserialization vulnerability CWE-502 in its model loading component. The framework uses torch.load to load model weight files e.g., llm.pt, flow.pt, hift.pt without enabling the security-restrictive...

CVE-2026-31251

CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e 2025-30-21 contains an insecure deserialization vulnerability CWE-502 in its gRPC server component. When the server starts, it loads the speech synthesis model from a user-specified directory using torch.load without enabling the...

EUVD-2026-21376

LiteLLM has a sandbox escape in custom-code guardrail...

EUVD-2026-27657

Keylime has a hardcoded attestation challenge nonce that allows replay attacks...

CVE-2026-7817 pgAdmin 4: Local file inclusion and server-side request forgery in LLM API configuration endpoints

Local file inclusion LFI and server-side request forgery SSRF vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied apikeyfile and apiurl preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by...