Tagged “osv”

CVEs tagged osv, newest first.

7182 CVEsRSS

CVE-2026-54234High· 7.5

vllm: vLLM: Denial of Service via malformed speculative decoding workload (CVE-2026-54234)

A flaw was found in vLLM, a high-throughput and memory-efficient inference and serving engine for Large Language Models (LLMs). A remote attacker can exploit this vulnerability by sending a specially crafted multi-request speculative decod…

▾ TwilightRed Hat · Red Hat AI Inference Server 3.4EPSS 0.62%via CSAF

CVE-2026-55646Medium· 6.5

4mo ago

vLLM is an inference and serving engine for large language models. From 0.22.0 to 0.23.0, the /v1/audio/transcriptions and /v1/audio/tran…

vLLM is an inference and serving engine for large language models. From 0.22.0 to 0.23.0, the /v1/audio/transcriptions and /v1/audio/translations routes call request.file.read() to fully materialize an uploaded audio file into memory bef…

▾ Sunlitvllm · vllmEPSS 0.52%via OSV

CVE-2026-55574High· 7.5

4mo ago

vllm: vLLM: Denial of Service via adversarial regular expression in structured outputs API (CVE-2026-55574)

A flaw was found in vLLM, a high-throughput and memory-efficient inference and serving engine for large language models (LLMs). A remote attacker could exploit this vulnerability by providing a specially crafted regular expression to the s…

▾ TwilightRed Hat · Red Hat AI Inference Server 3.4EPSS 0.58%via CSAF

CVE-2026-55380High· 7.5

4mo ago

python-pillow: Pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380)

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile._open() function reads image dimensions without proper validation,…

▾ TwilightRed Hat · Red Hat OpenShift AI 3.4EPSS 0.52%via CSAF

CVE-2026-55379High· 7.5

4mo ago

python-pillow: Pillow: Denial of Service via crafted BDF font file (CVE-2026-55379)

A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted BDF font file. The library's image processing function fails to properly …

▾ TwilightRed Hat · Red Hat OpenShift AI 3.4EPSS 0.52%via CSAF

CVE-2026-54060High· 7.5

4mo ago

python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files (CVE-2026-54060)

A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker…

▾ TwilightRed Hat · Red Hat OpenShift AI 3.4EPSS 0.42%via CSAF

CVE-2026-49297High· 8.1

4mo ago

Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by…

Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by the bucket listing API directly to a destination filesystem path without normalisation or containme…

▾ Twilightapache-airflow-providers-google · apache-airflow-providers-googleEPSS 0.99%via OSV

CVE-2026-24014Critical· 9.8

4mo ago

Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path wit…

Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port is exposed to an untrusted network, an…

▾ Midnightapache-iotdb · apache-iotdbEPSS 0.69%via OSV

CVE-2026-24013Critical· 9.1

4mo ago

Authentication Bypass by Spoofing vulnerability in Apache IoTDB.

Authentication Bypass by Spoofing vulnerability in Apache IoTDB. Certain Thrift RPC query handlers lack strict validation of the sessionId parameter. An attacker can construct requests with a forged sessionId and, without performing open…

▾ Midnightapache-iotdb · apache-iotdbEPSS 0.64%via OSV

CVE-2026-24012High· 7.5

4mo ago

Uncontrolled Resource Consumption vulnerability in Apache IoTDB.

Uncontrolled Resource Consumption vulnerability in Apache IoTDB. Some interface fails to impose reasonable limits on the time span and aggregation interval of the query. An attacker can construct a request with extreme parameters (e.g.…

▾ Twilightapache-iotdb · apache-iotdbEPSS 0.74%via OSV

CVE-2026-58203Medium· 5.3

4mo ago

pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max…

A flaw was found in the `pydantic-settings` component. When configured to handle nested secrets, this vulnerability allows an attacker to read sensitive files from outside the designated secrets directory. By placing a specially crafted sy…

▾ SunlitRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.18%via CSAF

CVE-2026-35381Low· 3.3

4mo ago

In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulnerable to untrusted JAR code execution.…

In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulnerable to untrusted JAR code execution.…

▾ Twilightnltk · nltkEPSS 0.19%via NVD

MAL-2026-6753None

4mo ago