Remote Code Execution (RCE)

vllm is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe deserialization due to the use of pickle.loads without proper input validation, allowing an attacker to execute arbitrary code remotely via a malicious serialized object...

Code Injection

loguru is vulnerable to code injection. The vulnerability exists in reduce function in recattrs.py due to the use of pickle.loads which allows an attacker to inject and execute arbitrary codes...