GHSA-VFFW-93WF-4J4Q vulnerabilities

Vulnerabilities for packages: wazuh-manager, airflow, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, wazuh-manager-fips, airflow-core, litellm...

PT-2026-50278

Name of the Vulnerable Software and Affected Versions vLLM affected versions not specified Description An issue exists in the image processing logic where image metadata is improperly handled. Specifically, the software fails to call ImageOps.exif transpose to normalize EXIF orientation, causing...

CVE-2026-12491: Misinterpretation of Input

A flaw was found in vLLM, an open-source library for large language model inference. This vulnerability arises from improper handling of image metadata, specifically EXIF orientation and PNG transparency tRNS data, during image processing. When images are converted to RGB, transparency informatio...

PT-2026-50491

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.23.1rc0 Description An incomplete fix for a previous memory leak issue allows unauthenticated attackers to leak heap memory addresses. The system fails to properly sanitize error messages in several response paths,...

CVE-2026-54283 vulnerabilities

Vulnerabilities for packages: mlflow, prefect, airflow, prefect-fips, semgrep, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, kserve, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, airflow-core, litellm, nemo...

GHSA-82W8-QH3P-5JFQ vulnerabilities

Vulnerabilities for packages: mlflow, prefect, airflow, prefect-fips, semgrep, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, kserve, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, airflow-core, litellm, nemo...

CVE-2026-54282 vulnerabilities

Vulnerabilities for packages: mlflow, prefect, airflow, prefect-fips, semgrep, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, kserve, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, airflow-core, litellm, nemo...

GHSA-JP82-JPQV-5VV3 vulnerabilities

Vulnerabilities for packages: mlflow, prefect, airflow, prefect-fips, semgrep, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, kserve, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, airflow-core, litellm, nemo...

CVE-2026-54273 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...

CVE-2026-54275 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...

CVE-2026-54277 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...

GHSA-63HW-FMQ6-XXG2 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...

GHSA-9X8Q-7H8H-WCW9 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...

GHSA-XCGM-R5H9-7989 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...

CVE-2026-54274 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...

CVE-2026-54276 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...

CVE-2026-54279 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...

CVE-2026-54280 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...

GHSA-4FVR-RGM6-GQMC vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...

GHSA-HPJ7-WQ8M-9HGP vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, awx, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, request-1276, apache-beam-python-3.13-sdk, mlflow-fips, authentik-fips, py3.13-scanner-test-libraries-aiohttp, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0,...