3418 matches found
EUVD-2025-32853
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
CVE-2025-59425 vLLM vulnerable to timing attack at bearer auth
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
CVE-2025-59425
A flaw was found in vLLM’s API token authentication logic, where token comparisons were not performed in constant time. This weakness could allow an attacker to exploit timing differences to guess valid tokens and bypass authentication. Mitigation Mitigation for this issue is either not available...
EUVD-2017-1552
Malware in sbrugna...
EUVD-2019-7373
Malware in sbrugna...
EUVD-2021-0890
Malware in sbrugna...
EUVD-2012-5493
Malware in sbrugna...
EUVD-2011-2355
Malware in sbrugna...
EUVD-2021-0764
Malware in sbrugna...
EUVD-2020-0062
Malware in sbrugna...
EUVD-2015-0850
Malware in sbrugna...
EUVD-2016-6175
Malware in sbrugna...
EUVD-2016-5004
Malware in sbrugna...
EUVD-2021-19643
Malware in sbrugna...
EUVD-2021-24164
Malware in sbrugna...
EUVD-2016-10693
Malware in sbrugna...
EUVD-2021-0803
Malware in sbrugna...
EUVD-2019-18846
Malware in sbrugna...