vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)

CVE-2026-105757

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`

CVE-2026-105755

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service

CVE-2026-105756

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

uv: Path traversal on Windows through wheel extraction

CVE-2026-104843

### Impact In versions of uv from 0.12.7 to 0.12.18 on Windows, uv could be induced into writing a file outside of the

历史摘要 · 未重新核验 · GitHub Advisory

Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

CVE-2026-102991

## Summary On Windows, a `TemplateLookup` URI beginning with a drive designator (e.g. `C:/../../secret.txt` or `C:\..\.

历史摘要 · 未重新核验 · GitHub Advisory

smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line

### Summary `parse()` has a quadratic-time path in `parseKey`, reachable on default options with ordinary valid input.

历史摘要 · 未重新核验 · GitHub Advisory

KaTeX: Existing prototype pollution can bypass trust restrictions

CVE-2026-103923

### Impact KaTeX can act as a read-side prototype pollution gadget in applications where `Object.prototype` has already

历史摘要 · 未重新核验 · GitHub Advisory

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

CVE-2026-104874

## Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6

历史摘要 · 未重新核验 · GitHub Advisory

Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)

CVE-2026-104846

A fulfilled Promise node deserialized by `fromJSON()` can trigger unintended invocation of a plugin-produced callable th

历史摘要 · 未重新核验 · GitHub Advisory

Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization

CVE-2026-104845

# Summary deserializeTypedArray casts the source node to ArrayBuffer without checking it and never bounds the element c

历史摘要 · 未重新核验 · GitHub Advisory

proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

CVE-2026-90711

### Impact `proxy-addr` determines which network hops are trusted proxies so that `X-Forwarded-For` can be believed. Wh

历史摘要 · 未重新核验 · GitHub Advisory

Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level when they followed a key-changing message

历史摘要 · 未重新核验 · GitHub Advisory

@nx/docker: OS command injection in the @nx/docker release pipeline

CVE-2026-104859

## Summary The `@nx/docker` release pipeline builds its `docker` invocations as shell command strings, interpolating `r

历史摘要 · 未重新核验 · GitHub Advisory

Nx: OS command injection via git revisions and remote refs

## Summary Nx core builds several `git` invocations as shell command strings with untrusted values interpolated into th

历史摘要 · 未重新核验 · GitHub Advisory

Nx daemon and plugin worker sockets are accessible to other local users

CVE-2026-104854

## Summary Nx creates the Unix domain sockets for its daemon and its plugin workers in a shared temporary directory wit

历史摘要 · 未重新核验 · GitHub Advisory

Nx: Path traversal in nx migrate package-migrations extraction

CVE-2026-104853

## Summary `nx migrate` reads each target package's `nx-migrations.migrations` value from its manifest and extracts the

历史摘要 · 未重新核验 · GitHub Advisory

compression vulnerable to Denial of Service via memory leak on premature response close

CVE-2026-87776

### Impact A vulnerability in compression `< 1.8.2` allows an attacker to trigger a Denial of Service (DoS) by disconne

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Channel read actions could skip target allowlists

### Summary Channel read actions could skip target allowlists. In affected versions, explicit read targets in Microsoft

历史摘要 · 未重新核验 · GitHub Advisory

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

CVE-2026-88029

### Impact When reading/writing via an ID with the GridFS API, require an exact match on the given ID. Otherwise, if a

历史摘要 · 未重新核验 · GitHub Advisory

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

CVE-2026-88023

### Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Li

历史摘要 · 未重新核验 · GitHub Advisory