Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST string-processing instrumentation does not properly handle certain internal errors while old-style % string formatting processes attacker-controlled…

▾ TwilightDataDog · dd-trace-pyEPSS 0.33%via CVEORG

CVE-2026-116588High· 8.7

1w ago

Datadog dd-trace-py: ReDOS in URL query string obfuscation

Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the default query-string obfuscation regular expression can exhibit excessive backtracking while synchronously processing attacker-controlled URL q…

▾ TwilightDataDog · dd-trace-pyEPSS 0.47%via CVEORG

CVE-2026-116577Medium· 5.3

1w ago

Tornado: Quadratic CPU usage when parsing HTTP headers with line folding

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, Tornado's HTTP header parser accepts obsolete line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on th…

▾ Sunlittornadoweb · tornadoEPSS 0.38%via CVEORG

CVE-2026-116578Low· 2.1

1w ago

Tornado: Open redirect in RedirectHandler via protocol-relative URLs

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, tornado.web.RedirectHandler URL templates can place regex-capture substitutions where crafted request paths change the redirect scheme or network locati…

▾ Sunlittornadoweb · tornadoEPSS 0.46%via CVEORG

CVE-2026-115924High· 8.6PoC

1w ago

Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs

Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sam_model through rembg/commands/s_command.py to rembg/sessions/sam.py, where it is interpolated into SAM fil…

▾ Midnightdanielgatis · rembgEPSS 0.39%via CVEORG

CVE-2026-115910Medium· 6.8PoC

1w ago

Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim

Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_core/backends/open_id_connect.py uses get_and_store_nonce to place the OpenID Connect nonce in a shared OpenIdConnectAs…

▾ Twilightpython-social-auth · social-coreEPSS 0.16%via CVEORG

CVE-2026-115911Medium· 6.5

1w ago

vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool

vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can supply a request chat template when no server-side --chat-template is configured, or a malicious model repository can …

▾ Sunlitvllm-project · vllmEPSS 0.31%via CVEORG

CVE-2026-115913Medium· 6.5

1w ago

vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder in phi4mm_audio.py and phi4mm_utils.py uses eager attention by default, allowing a remote client to submit one legal l…

▾ Sunlitvllm-project · vllmEPSS 0.33%via CVEORG

CVE-2026-115916Medium· 6.5

1w ago

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_token_id with an off-by-one upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to pass valid…

▾ Sunlitvllm-project · vllmEPSS 0.31%via CVEORG

CVE-2026-115917Low· 3.4

1w ago

vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configures Starlette CORSMiddleware with allowed_origins set to a wildcard by default. A malicious web page can use a victim…

▾ Sunlitvllm-project · vllmEPSS 0.24%via CVEORG

CVE-2026-115914Medium· 6.5

1w ago

vLLM DeepSeek-OCR image processing vulnerable to denial of service

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote client that can reach the OpenAI-compatible API to submit a legal…

▾ Sunlitvllm-project · vllmEPSS 0.40%via CVEORG

CVE-2026-115918Medium· 6.5

1w ago

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an attacker-controlled template in chat_template_kwargs[chat_template] when n…

▾ Sunlitvllm-project · vllmEPSS 0.35%via CVEORG