vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)

CVE-2026-105757

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`

CVE-2026-105755

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service

CVE-2026-105756

## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit

历史摘要 · 未重新核验 · GitHub Advisory

uv: Path traversal on Windows through wheel extraction

CVE-2026-104843

### Impact In versions of uv from 0.12.7 to 0.12.18 on Windows, uv could be induced into writing a file outside of the

历史摘要 · 未重新核验 · GitHub Advisory

Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

CVE-2026-102991

## Summary On Windows, a `TemplateLookup` URI beginning with a drive designator (e.g. `C:/../../secret.txt` or `C:\..\.

历史摘要 · 未重新核验 · GitHub Advisory

smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line

### Summary `parse()` has a quadratic-time path in `parseKey`, reachable on default options with ordinary valid input.

历史摘要 · 未重新核验 · GitHub Advisory

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

CVE-2026-104874

## Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6

历史摘要 · 未重新核验 · GitHub Advisory

Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level when they followed a key-changing message

历史摘要 · 未重新核验 · GitHub Advisory

Nx: Path traversal in nx migrate package-migrations extraction

CVE-2026-104853

## Summary `nx migrate` reads each target package's `nx-migrations.migrations` value from its manifest and extracts the

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Channel read actions could skip target allowlists

### Summary Channel read actions could skip target allowlists. In affected versions, explicit read targets in Microsoft

历史摘要 · 未重新核验 · GitHub Advisory

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

CVE-2026-88029

### Impact When reading/writing via an ID with the GridFS API, require an exact match on the given ID. Otherwise, if a

历史摘要 · 未重新核验 · GitHub Advisory

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

CVE-2026-88023

### Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Li

历史摘要 · 未重新核验 · GitHub Advisory

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

CVE-2026-100723

## Summary When an application explicitly exposes Node's `zlib` module through vm2's `NodeVM` builtin allowlist, an unt

历史摘要 · 未重新核验 · GitHub Advisory

Snowflake drivers writes sensitive information to logs

CVE-2026-86597

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers

历史摘要 · 未重新核验 · GitHub Advisory

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element...

CVE-2026-105183

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function

历史摘要 · 未重新核验 · GitHub Advisory

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0....

CVE-2026-105182

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown func

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The...

CVE-2026-105184

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unkno

历史摘要 · 未重新核验 · GitHub Advisory

Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows...

CVE-2026-105292

Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject l

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects...

CVE-2026-105175

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing o

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue...

CVE-2026-105172

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functio

历史摘要 · 未重新核验 · GitHub Advisory