vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

Pillow is vulnerable to a FITS GZIP decompression bomb

vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server

vLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing