Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

SSRF Protection Bypass in vLLM

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default

vLLM affected by RCE via auto_map dynamic module loading during model initialization

Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers

vLLM: OpenAI auth bypass

Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components

vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out

FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()

Apache Thrift: Swift Range crash in skip()

Invalid Memory Access in Sentencepiece,

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution

vLLM - Denial of Service via Unvalidated Multimodal Embeddings

Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm

Python-Multipart: Denial of Service via unbounded multipart part headers

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

Apache Thrift: Go TFramedTransport uint32 overflow

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

Pillow is vulnerable to a FITS GZIP decompression bomb

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)

ReDoS in multipart 1.3.0 - `parse_options_header()`

xgrammar: Multi-layer nesting causes DoS

Pillow has an out-of-bounds write when loading PSD images

Python-Multipart has Arbitrary File Write via Non-Default Configuration

pyasn1 has a DoS vulnerability in decoder

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

AIOHTTP Vulnerable to Deserialization of Untrusted Data

Apache Thrift: TSSLTransportFactory.java hostname verification

Apache Thrift: Swift Compact Protocol integer overflow

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

vLLM vulnerable to Server-Side Request Forgery (SSRF) in `MediaConnector`

Vllm: server side request forgery (ssrf) in mediaconnector

Apache Thrift: C++ JSON OOB read

Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser

vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server

vLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing

Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials

pip can extract console_scripts and gui_scripts outside installation directory

wheel Allows Arbitrary File Permission Modification via Path Traversal

Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Apache Thrift: c_glib dispatch stack overflow

Ai-inference-server: authentication bypass via unprotected inference endpoint in api