12012 matches found
CVE-2025-59425: Covert Timing Channel
vLLM is an inference and serving engine for large language models LLMs. Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided A...
vLLM security vulnerabilities
vLLM is a vLLM open source high throughput and memory efficient inference and service engine for LLM. A security vulnerability exists in versions prior to vLLM 0.11.0rc2, which stems from a timing attack vulnerability in the API key authentication method that could lead to authentication bypass...
PT-2025-41178
🔴 vLLM, Timing Attack on API Key, CVE-2024-53500 Critical https://t.co/adbNFksIgb...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986511)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986511 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference of timing generator Why & How Check whether assigned timi...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986509)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986509 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: da9211: Use irq handler when ready If the system does not come from reset like when it...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987022)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987022 advisory. In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid WARNON timing related checks The soft/batadv interface for a queued OGM can be...
RockyLinux 10 : delve and golang (RLSA-2025:7466)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:7466 advisory. golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints CVE-2024-45341 golang: net/http: net/http: sensitive headers...
SUSE CVE-2025-10729
The module will parse a node which is not a child of a structural node. The node will be deleted after creation but might be accessed later leading to a use after free...
EUVD-2025-32386
In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpcclient device,...
tomcat security update
An update is available for tomcat. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...
EUVD-2025-24439
Malicious code in bioql PyPI...
EUVD-2021-7351
Malicious code in bioql PyPI...
EUVD-2025-6671
Malicious code in bioql PyPI...
EUVD-2024-2748
Malicious code in bioql PyPI...
EUVD-2022-1515
Malicious code in bioql PyPI...
EUVD-2025-24063
Malicious code in bioql PyPI...
EUVD-2024-2648
Malicious code in bioql PyPI...
EUVD-2022-5314
Malicious code in bioql PyPI...