Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)

Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a…

All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization…

A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in…

Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components

JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.

protobufjs: Code injection through bytes field defaults in generated toObject code

jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix

Command Injection in mlflow/mlflow

Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()

Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers

Argo Workflows Is Missing Authorization in Sync ConfigMap Provider

Quarkus authorization bypass via semicolon path normalization inconsistency

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

Path Traversal in keras-team/keras

Argo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure

NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name

Safe Mode Bypass in keras-team/keras

Arbitrary Code Execution in feast-dev/feast

Kserve: kserve: server-side request forgery via malicious storageuri

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security

fast-uri vulnerable to host confusion via failed IDN canonicalization

Mistune: Potential DoS via quadratic-time parsing in parse_link_text

vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution

NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read

Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities

undici WebSocket client vulnerable to denial of service via fragment count bypass

ws: Memory exhaustion DoS from tiny fragments and data chunks

form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Axios: Allocation of Resources Without Limits or Throttling in axios

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm

JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection

ws: Uninitialized memory disclosure

Python-Multipart: Denial of Service via unbounded multipart part headers

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

protobufjs: Denial of service through unbounded protobuf recursion

Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow