Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization

cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers

vLLM: OpenAI auth bypass

Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components

FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()

Apache Thrift: Swift Range crash in skip()

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution

vLLM - Denial of Service via Unvalidated Multimodal Embeddings

Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm

Python-Multipart: Denial of Service via unbounded multipart part headers

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

Apache Thrift: Go TFramedTransport uint32 overflow

Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.

Pillow is vulnerable to a FITS GZIP decompression bomb

PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed

AIOHTTP Vulnerable to Deserialization of Untrusted Data

Apache Thrift: TSSLTransportFactory.java hostname verification

Apache Thrift: Swift Compact Protocol integer overflow

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

Apache Thrift: C++ JSON OOB read

Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser

vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server

vLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing

pip can extract console_scripts and gui_scripts outside installation directory

Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Apache Thrift: c_glib dispatch stack overflow

Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations