9976 matches found
CVE-2025-59425 vLLM vulnerable to timing attack at bearer auth
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
EUVD-2025-32853
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
CVE-2025-59425 vLLM vulnerable to timing attack at bearer auth
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
CVE-2025-59425
A flaw was found in vLLM’s API token authentication logic, where token comparisons were not performed in constant time. This weakness could allow an attacker to exploit timing differences to guess valid tokens and bypass authentication. Mitigation Mitigation for this issue is either not available...
EUVD-2019-13375
Malware in sbrugna...
EUVD-2002-0941
Malware in sbrugna...
EUVD-2019-14013
Malware in sbrugna...
EUVD-2020-17232
Malware in sbrugna...
EUVD-2019-13374
Malware in sbrugna...
EUVD-2013-1655
Malware in sbrugna...
EUVD-2021-1608
Malware in sbrugna...
EUVD-2018-3113
Malware in sbrugna...
EUVD-2012-5493
Malware in sbrugna...
EUVD-2013-1015
Malware in sbrugna...
EUVD-2020-3634
Malware in sbrugna...
EUVD-2020-0062
Malware in sbrugna...
EUVD-2020-22856
Malware in sbrugna...
EUVD-2015-0850
Malware in sbrugna...