Все уязвимости

vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense

free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransfer

fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation

Langflow OSS is affected by multiple vulnerabilities

urllib3: HTTPS proxy TLS configuration may be ignored or overridden

QUIC Unvalidated Amplification Credit may be Over Accounted

MD5 Hash Collision in run-llama/llama_index

RS9116W/SiWx917 plaintext pause encryption request causes DOS

Jostle logic bypass degrades resolution performance

BT122 stops advertising

BT122 plaintext pause encryption request causes DOS

WatchGuard Firebox System Integrity Check Bypass

WatchGuard Firebox Boot Time System Integrity Check Bypass

MD5 Hash Collision in run-llama/llama_index

Indian Scout Bobber 2025 WCM CAN bus-off attack silently bypasses anti-theft shutdown

Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet module

WordPress Stripe Payments plugin <= 2.0.98 - Bypass Vulnerability vulnerability

Erlang/OTP SSH Has Strict KEX Violations

Insecure API Design in danny-avila/librechat

Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

A vulnerability has been identified in APOGEE PXC+TALON TC Series (BACnet) (All versions). Affected

Apache Traffic Server: Expect header field can unreasonably retain resource

In Tuleap, deleting a report can delete criteria filters in other reports

Tuleap allows default values to be cleared from field configuration

Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend

Cortex XDR Agent: Local Windows Administrator Can Disable the Agent

Tuleap deleting or moving an artifact can delete values from unrelated artifacts

HPACK table poisoning in gRPC C++, Python & Ruby

UAA Failure to Remove Shadow User’s Access