RHSA-2026:3782

node-tar is a Tar for Node.js.

vLLM is an inference and serving engine for large language models (LLMs).

vLLM is an inference and serving engine for large language models (LLMs).

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427.

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have…

urllib3 is an HTTP client library for Python.

vLLM is an inference and serving engine for large language models (LLMs).

urllib3 is a user-friendly HTTP client library for Python.

vLLM is an inference and serving engine for large language models (LLMs).

The net/url package does not set a limit on the number of query parameters in a query.

Python-Multipart is a streaming multipart parser for Python.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

urllib3 is a user-friendly HTTP client library for Python.

vLLM is an inference and serving engine for large language models (LLMs).

The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.

React Router is a router for React.

React Router is a router for React.

Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.

Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability.

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability.

Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability.

Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability.

Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability.

Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability.

Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability.

Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.

Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

React Router is a router for React.

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory e…

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened.