4229 matches found
CVE-2025-59425
CVE-2025-59425 affects vLLM prior to 0.11.0rc2, where API key validation used a string comparison that leaks timing information. Attackers observing responses over many attempts could determine the next correct character in the API key, enabling authentication bypass. The issue is resolved in ver...
CVE-2025-59425
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
CVE-2025-59425
A flaw was found in vLLM’s API token authentication logic, where token comparisons were not performed in constant time. This weakness could allow an attacker to exploit timing differences to guess valid tokens and bypass authentication. Mitigation Mitigation for this issue is either not available...
EUVD-2012-5493
Malware in sbrugna...
EUVD-2019-5040
Malware in sbrugna...
EUVD-2021-0890
Malware in sbrugna...
EUVD-2004-2672
Malware in sbrugna...
EUVD-2018-7661
Malware in sbrugna...
EUVD-2021-0645
Malware in sbrugna...
EUVD-2015-2251
Malware in sbrugna...
EUVD-2019-2244
Malware in sbrugna...
EUVD-2021-0850
Malware in sbrugna...
EUVD-2011-2582
Malware in sbrugna...
EUVD-2018-3838
Malware in sbrugna...
EUVD-2021-25004
Malware in sbrugna...
EUVD-2018-0170
Malware in sbrugna...
EUVD-2015-5676
Malware in sbrugna...
EUVD-2020-0167
Malware in sbrugna...