vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

CVE-2026-105754

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)

CVE-2026-105757

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`

CVE-2026-105755

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service

CVE-2026-105756

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

uv: Path traversal on Windows through wheel extraction

CVE-2026-104843

### Impact In versions of uv from 0.12.7 to 0.12.18 on Windows, uv could be induced into writing a file outside of the

历史摘要 · 未重新核验 · GitHub Advisory

Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

CVE-2026-102991

## Summary On Windows, a `TemplateLookup` URI beginning with a drive designator (e.g. `C:/../../secret.txt` or `C:\..\.

历史摘要 · 未重新核验 · GitHub Advisory

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

CVE-2026-104874

## Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6

历史摘要 · 未重新核验 · GitHub Advisory

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

CVE-2026-88029

### Impact When reading/writing via an ID with the GridFS API, require an exact match on the given ID. Otherwise, if a

历史摘要 · 未重新核验 · GitHub Advisory

Snowflake drivers writes sensitive information to logs

CVE-2026-86597

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers

历史摘要 · 未重新核验 · GitHub Advisory

Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

CVE-2026-71416

### Summary The Headroom WebSocket server does not validate the `Origin` header of incoming client WebSocket requests be

历史摘要 · 未重新核验 · GitHub Advisory

Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain

### Summary: 5 findings — unauthenticated full-API exposure (F1, lead Critical), read-side authorization gap that persi

历史摘要 · 未重新核验 · GitHub Advisory

Vibe-Trading file-read tools expose arbitrary server-readable files

### Summary: 2 findings — `safe_user_path()` accepts any path under `Path.home()` or `Path.cwd()`, which inside the shi

历史摘要 · 未重新核验 · GitHub Advisory

Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF

### Summary: 5 findings — `BashTool` shell-injection sink (F6, the canonical RCE primitive), `BackgroundRunTool` async

历史摘要 · 未重新核验 · GitHub Advisory

geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point

CVE-2026-77387

### Impact `geopy.Point` and `Point.from_string()` may take excessive CPU time when parsing long, malformed coordinate

历史摘要 · 未重新核验 · GitHub Advisory

Dulwich: Arbitrary File Write (RCE) on Windows via Unvalidated Drive Letters in Tree Paths

### Affected files * `dulwich/index.py` (Methods: `validate_path_element_ntfs`, `_tree_to_fs_path`) * `dulwich/porcelain

历史摘要 · 未重新核验 · GitHub Advisory

Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object Resolution

### Affected file * `dulwich/pack.py` (Method: `Pack.resolve_object`) ### Description / Summary A High-severity Denial

历史摘要 · 未重新核验 · GitHub Advisory

Dulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protections

## Summary Dulwich's `porcelain.checkout(paths=[...])` code path writes files using raw `os.open(file_path, O_WRONLY|O_

历史摘要 · 未重新核验 · GitHub Advisory

Dulwich: Symlink directory traversal in filter-branch index_filter via cross-commit state persistence

## Summary Dulwich's `filter_branch.py` `CommitFilter._apply_index_filter()` is vulnerable to symlink directory travers

历史摘要 · 未重新核验 · GitHub Advisory

Dulwich: Symlink directory traversal in stash pop allows arbitrary file write via intermediate directory symlinks

## Summary Dulwich's `stash.py:pop()` function is vulnerable to symlink directory traversal, allowing an attacker to wr

历史摘要 · 未重新核验 · GitHub Advisory

JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

CVE-2026-102830

## Description A language pack ships a `Plural-Forms` header saying how the language counts, for example `nplurals=2; p

历史摘要 · 未重新核验 · GitHub Advisory