vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
Affects: vLLM
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
331 advisories rated High
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`
Affects: LiteLLM
vLLM: DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL…
Affects: vLLM
Jupyter: Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization
Affects: Jupyter
MLflow: MLflow FileStore trace IDs allow path traversal and arbitrary file writes
Affects: MLflow
Langflow: Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers
Affects: Langflow
Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
vLLM: Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method…
Affects: vLLM
Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
Affects: Langflow
Langflow: Prompt injection in Langflow Smart Transform can lead to code execution
Affects: Langflow
Jupyter: JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system…
Affects: Jupyter
vLLM: A flaw has been found in vllm-project vLLM up to 0.26.0
Affects: vLLM
vLLM: VLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in…
Affects: vLLM
vLLM: VLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt…
Affects: vLLM
vLLM: VLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership…
Affects: vLLM
vLLM: VLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on…
Affects: vLLM
vLLM: vllm p2p never connected zmq_exhaustion
Affects: vLLM
vLLM: VLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix…
Affects: vLLM
vLLM: VLLM versions through 0.29.0 contain a denial of service vulnerability in the NIXL connector's…
Affects: vLLM
vLLM: VLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings…
Affects: vLLM
vLLM: VLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference…
Affects: vLLM
vLLM: VLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when…
Affects: vLLM
vLLM: VLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2…
Affects: vLLM
Flowise: Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the…
Affects: Flowise
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code…
Affects: Langflow