TI-2025-38808 CVE-2025-62593 · GHSA-q279-jhrf-cc6v
Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Priority CRITICAL 100KEV
Ray is an AI compute engine.
RHSA-2025:23078
Red Hat AI Inference Server 3.2.2 (CUDA)
Released 2025-12-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
Fixes 20 records
TI-2023-26002 CVE-2023-48022 · GHSA-6wgj-66m2-xxp2
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the…
Priority CRITICAL 90
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API.
TI-2025-09085 CVE-2025-9900 · GHSA-qc8j-wvjf-7jfj
Libtiff: libtiff write-what-where
Priority HIGH 73
A flaw was found in Libtiff.
TI-2025-38917 CVE-2025-62727 · GHSA-7f5h-v6xp-fcq8
Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse
Priority HIGH 72
Starlette is a lightweight ASGI framework/toolkit.
TI-2025-06334 CVE-2025-6965 · GHSA-2m69-gcr7-jv3q
Integer Truncation on SQLite
Priority HIGH 72
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.
TI-2023-28739 CVE-2023-52356 · GHSA-cx8g-4cf5-cjv3
Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
Priority HIGH 72
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API.
TI-2025-07481 CVE-2025-8176 · GHSA-gvgc-3ch5-px8p
LibTIFF tiffmedian.c get_histogram use after free
Priority MEDIUM 55
A vulnerability was found in LibTIFF up to 4.7.0.
TI-2025-33779 CVE-2025-53906
Vim has path traversal issue with zip.vim and special crafted zip archives
Priority MEDIUM 52
Vim is an open source, command line text editor.
TI-2025-33778 CVE-2025-53905
Vim has path traversial issue with tar.vim and special crafted tar files
Priority MEDIUM 52
Vim is an open source, command line text editor.
Priority MEDIUM 52
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.
TI-2025-40880 CVE-2025-66448 · GHSA-8fr4-5q9j-m8gm
vLLM vulnerable to remote code execution via transformers_utils/get_config
Priority MEDIUM 47
vLLM is an inference and serving engine for large language models (LLMs).
TI-2025-16741 CVE-2025-22869 · GHSA-hcg3-q754-cr77
Potential denial of service in golang.org/x/crypto
Priority MEDIUM 41
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…
TI-2025-04773 CVE-2025-5318 · GHSA-98qw-prqm-9f4p
Libssh: out-of-bounds read in sftp_handle()
Priority MEDIUM 41
A flaw was found in the libssh library in versions less than 0.11.2.
TI-2025-36977 CVE-2025-59425 · GHSA-wr9h-g72x-mwhm
vLLM vulnerable to timing attack at bearer auth
Priority MEDIUM 40
vLLM is an inference and serving engine for large language models (LLMs).
TI-2025-16740 CVE-2025-22868 · GHSA-6v2p-p543-phr9
Unexpected memory consumption during token parsing in golang.org/x/oauth2
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
TI-2025-32660 CVE-2025-52565 · GHSA-qw9x-cqr3-wc7r
container escape due to /dev/console mount and related races
Priority LOW 38
runc is a CLI tool for spawning and running containers according to the OCI specification.
TI-2025-36934 CVE-2025-59375 · GHSA-vjqp-pjp6-xcxx
Resource allocation without limits in libexpat
Priority LOW 36
libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
TI-2023-28738 CVE-2023-52355 · GHSA-fh6j-mgh8-7prh
Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom
Priority LOW 36
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API.
TI-2025-05648 CVE-2025-6242 · GHSA-3f6c-7fw2-ppm4
Vllm: server side request forgery (ssrf) in mediaconnector
Priority LOW 31
A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set.
TI-2024-37351 CVE-2024-56433 · GHSA-7683-vm2j-m4cc
shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior…
Priority LOW 18
shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on local…