prosey

Prosey Prosey is a CLI tool to download and display video transcriptions from YouTube, so you can get the information you're looking for without wasting hours. The main use cases are: Summarize a YouTube video and display it in the CLI with a single command quicker. Read video captions, formatted...

CVE-2026-116516

Mattermost versions =11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an authenticated attacker to crash the Agents plugin via summarizing a Zoom chat transcription containing short continuation lines. Mattermost Advisory ID: MMSA-2026-00723...

CVE-2026-116516 Insufficient length validation when parsing Zoom chat transcriptions

Mattermost versions =11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an authenticated attacker to crash the Agents plugin via summarizing a Zoom chat transcription containing short continuation lines. Mattermost Advisory ID: MMSA-2026-00723...

CVE-2026-116516

Mattermost versions

EUVD-2026-109838

Mattermost versions =11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an authenticated attacker to crash the Agents plugin via summarizing a Zoom chat transcription containing short continuation lines. Mattermost Advisory ID: MMSA-2026-00723...

CVE-2026-109311

A flaw was found in vLLM. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS by uploading a crafted Immersive Audio Model and Formats IAMF audio file to the transcription endpoint. Because input data is passed to the underlying media processing library...

Improper Validation of Specified Quantity in Input

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via loadaudiopyav in the audio transcription endpoint /v1/audio/transcriptions. The function...

CVE-2026-109311

Versions of vLLM prior to 0.29.0 are vulnerable to a heap overflow DoS. The issue arises because the software passes uploaded audio files to the PyAV/FFmpeg av.open() fallback using only a file-size check, which exposes a known heap overflow in FFmpeg's IAMF parser . Authenticated remote attacker...

CVE-2026-109311 vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload

vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v1/audio/transcriptions, corrupting the heap and crashing the A...

[SECURITY] Fedora 45 Update: liblouisutdml-2.12.0-10.fc45

This is a library intended to provide complete braille transcription services for UTDML Unified Tactile Document Markup Language documents. It translates into appropriate braille codes and formats according to its style sheet and the specifications in the document. liblouisutdml is the successor ...

Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor

Mac security researcher Patrick Wardle says it’s trivial to turn Muse into “the ultimate backdoor.” Increasingly, AI assistants are changing from tools that simply answer questions into agents that can plan tasks, use connected services, and take actions for us. These actions might include bookin...

PT-2026-96281

Name of the Vulnerable Software and Affected Versions Joplin versions prior to 3.7.7 Description In Joplin Server instances where TRANSCRIBE ENABLED is set to true, the handlers for the endpoints "/api/transcribe/:id" GET and POST pass the decoded id directly into transcription backend URLs. An...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the transcription due to improper validation of audio sample rate headers. An...

CVE-2026-90555

vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server proce...

CVE-2026-90555

A flaw was found in vLLM. An authenticated client can exploit this vulnerability by submitting forged FLAC Free Lossless Audio Codec headers with an inflated sample rate to the transcription endpoint. This bypasses duration checks, leading to excessive memory allocation within the API server...

CVE-2026-90555 vLLM before 0.28.0 Denial of Service via Audio Header

vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server proce...

EUVD-2026-76873

vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server proce...

CVE-2026-90555 vLLM before 0.28.0 Denial of Service via Audio Header

vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server proce...

CVE-2026-90555

vLLM versions before 0.28.0 contain a Denial of Service vulnerability in the transcription endpoint. The root cause is a failure to validate audio sample rate headers in submitted files. An authenticated attacker can bypass duration checks by submitting forged FLAC headers with inflated sample ra...

CVE-2026-90555 vLLM before 0.28.0 Denial of Service via Audio Header

vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server proce...