64 matches found
ROPE
ROPE: Aplicación de Política de Origen Enrutado Código fuente de nuestro artículo: ROPE: Aplicación de Política de Origen Enrutado contra la Inyección Indirecta de Prompts por Xinhang Ma, Chaowei Xiao, William Yeoh, Ning Zhang, Yevgeniy Vorobeychik Resumen La inyección indirecta de prompts IPI...
OPENSUSE-SU-2026:12039-1 python313-rope-1.14.0-1.4 on GA media
These are all security issues fixed in the python313-rope-1.14.0-1.4 package on the GA media of openSUSE Tumbleweed...
PT-2026-105748
These are all security issues fixed in the python313-rope-1.14.0-1.4 package on the GA media of openSUSE Tumbleweed...
Denial Of Service (DoS)
vLLM is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of prompt embedding payloads for models using M-RoPE, which allows an authenticated attacker to trigger an assertion failure and crash the entire server by sending a crafted /v1/completions request...
EUVD-2026-41925
vLLM denial of service via prompt embeds on M-RoPE models...
GHSA-33CG-GXV8-3P8G vLLM denial of service via prompt embeds on M-RoPE models
Summary Short summary of the problem. Make the impact and severity as clear as possible. For example: An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Sending a pure prompt embeds payload in a /v1/completions request with a model usi...
vLLM denial of service via prompt embeds on M-RoPE models
Summary Short summary of the problem. Make the impact and severity as clear as possible. For example: An unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Sending a pure prompt embeds payload in a /v1/completions request with a model usi...
PYSEC-2026-2303
vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a /v1/completions request with a model using M-RoPE causes EngineCore to fail an assertion and fatally crash, shutting down the entire server application. Any remote user who is...
CVE-2026-55514
vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a /v1/completions request with a model using M-RoPE causes EngineCore to fail an assertion and fatally crash, shutting down the entire server application. Any remote user who is...
CVE-2026-55514
CVE-2026-55514 affects the vLLM library (inference/serving) from versions 0.12.0 through older than 0.24.0. Sending a pure prompt embeds payload in a /v1/completions request for a model using M-RoPE triggers an EngineCore assertion, causing a fatal crash that shuts down the entire server applicat...
CVE-2026-55514 vLLM denial of service via prompt embeds on M-RoPE models
vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a /v1/completions request with a model using M-RoPE causes EngineCore to fail an assertion and fatally crash, shutting down the entire server application. Any remote user who is...
CVE-2026-55514: Reachable Assertion
vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a /v1/completions request with a model using M-RoPE causes EngineCore to fail an assertion and fatally crash, shutting down the entire server application. Any remote user who is...
durabletask 1.4.1, 1.4.2, and 1.4.3 contain malicious code distributed via a compromised maintainer account
durabletask versions 1.4.1, 1.4.2, and 1.4.3 were published on 2026-05-19 within a35-minute window through a compromised PyPI maintainer account and contained malicious code.On import, the package fetched a remote payload rope.pyz from anattacker-controlled host and executed it.The payload was a...
CVE-2015-3539
Rope before 0.11.0 allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load...
Towards Cybersecurity Superintelligence: From AI-Guided Humans to Human-Guided AI
Cybersecurity superintelligence -- artificial intelligence exceeding the best human capability in both speed and strategic reasoning -- represents the next frontier in security. This paper documents the emergence of such capability through three major contributions that have pioneered the field o...
EUVD-2014-5649
Malware in sbrugna...
EUVD-2007-0800
Malware in sbrugna...
EUVD-2018-0132
Malware in sbrugna...
