TI-2026-35991 CVE-2026-48710 · GHSA-86qp-5c8j-p5mr
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
Priority CRITICAL 86KEV
Starlette is a lightweight ASGI framework/toolkit.
RHSA-2026:70969
Red Hat AI Inference 3.4.5 (spyre)
Released 2026-09-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.4 registry.redhat.io/rhaii/vllm-spyre-rhel9
Fixes 29 records
TI-2026-36017 CVE-2026-48746 · GHSA-94f4-hr76-p5j6
vLLM: OpenAI auth bypass
Priority HIGH 78
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-48588 CVE-2026-69249 · GHSA-jwv3-5hgf-82ww
python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
Priority HIGH 77
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
TI-2026-42349 CVE-2026-59204 · GHSA-vjc4-5qp5-m44j
Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
Priority HIGH 77
Pillow is a Python imaging library.
TI-2026-04577 CVE-2026-5241 · GHSA-fgcw-684q-jj6r
Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers
Priority HIGH 76
A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization.
TI-2026-42344 CVE-2026-59197 · GHSA-xj96-63gp-2gmr
Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
Priority HIGH 75
Pillow is a Python imaging library.
TI-2026-42350 CVE-2026-59205 · GHSA-9hw9-ch79-4vh6
Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatch
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-42347 CVE-2026-59200 · GHSA-jjj6-mw9f-p565
Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-42346 CVE-2026-59199 · GHSA-6r8x-57c9-28j4
Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-39958 CVE-2026-55380 · GHSA-phj9-mv4w-65pm
Pillow GdImageFile decompression bomb protection bypass
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-39957 CVE-2026-55379 · GHSA-45hq-cxwh-f6vc
Pillow BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb…
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-39137 CVE-2026-54234 · GHSA-8wr5-jm2h-8r4f
vLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjection
Priority HIGH 72
vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.
TI-2026-38994 CVE-2026-54060 · GHSA-5x94-69rx-g8h2
Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
Priority HIGH 72
Pillow is a Python imaging library.
TI-2026-04816 CVE-2026-5497 · GHSA-wcwg-c5fc-9vrc
Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm
Priority HIGH 72
vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method.
TI-2026-38992 CVE-2026-54058 · GHSA-62p4-gmf7-7g93
Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
Priority HIGH 69
Pillow is a Python imaging library.
TI-2026-35886 CVE-2026-48526 · GHSA-xgmm-8j9v-c9wx
PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed
Priority HIGH 68
PyJWT is a JSON Web Token implementation in Python.
TI-2026-48587 CVE-2026-69248 · GHSA-m2h6-j472-rp4c
python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees
Priority MEDIUM 64
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
TI-2026-51646 CVE-2026-73556 · GHSA-48jh-3gj7-fg8v
Regular expression denial of service in vllm-project vllm
Priority MEDIUM 63
vLLM is an inference and serving engine for large language models.
TI-2026-32202 CVE-2026-44223 · GHSA-83vm-p52w-f9pw
vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters
Priority MEDIUM 62
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-30619 CVE-2026-42311 · GHSA-pwv6-vv43-88gr
Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)
Priority MEDIUM 44
Pillow is a Python imaging library.
TI-2026-39183 CVE-2026-54283 · GHSA-82w8-qh3p-5jfq
Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS
Priority LOW 39
Starlette is a lightweight ASGI framework/toolkit.
TI-2026-40113 CVE-2026-55574 · GHSA-rwxx-mrjm-wc2m
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
Priority LOW 38
vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.
TI-2026-30106 CVE-2026-41523 · GHSA-q8gq-377p-jq3r
vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution
Priority LOW 37
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-48586 CVE-2026-69247 · GHSA-g6cj-pr64-35w5
cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
Priority LOW 35
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
TI-2026-48583 CVE-2026-69244 · GHSA-cq5v-8q36-5273
AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)
Priority LOW 32
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
TI-2026-42695 CVE-2026-59881 · GHSA-mq44-7p77-q5h7
AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate
Priority LOW 31
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
TI-2026-27214 CVE-2026-34993 · GHSA-jg22-mg44-37j8
AIOHTTP Vulnerable to Deserialization of Untrusted Data
Priority LOW 31
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
TI-2026-46365 CVE-2026-64847 · GHSA-5p39-cfhj-2xmp
AnyIO process-pool workers can block indefinitely on undrained stderr
Priority LOW 29
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio.
TI-2026-48582 CVE-2026-69243 · GHSA-mfx4-hv73-q22v
AIOHTTP: HTTP request smuggling via WebSocket upgrade
Priority LOW 28
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.