dos
6 live · 166 on record · last incident 1 day ago
Live6
- live9.0MongoDB Server CVE-2026-118383: Critical MongoDB Server Pre-Auth Crash Flaw
Patch now · Disclosed · Patched · since 12 Nov 2026 · CVE-2026-118383
A critical pre-authentication vulnerability in MongoDB Server allows unauthenticated attackers to crash lagging replica servers during failover events. The vendor has released patches to address the issue.
Do:Update MongoDB Server to the latest fixed version.
- liveNode.js Node.js fixes HTTP/2 vulnerabilities causing server crashes and memory leaks
Patch now · Disclosed · Patched · since 12 Nov 2026
Node.js released updates addressing HTTP/2 flaws that allow unauthenticated clients to crash servers and leak memory contents from other connections. Fixed versions are available across the supported release lines.
Do:Update Node.js to version 22.23.5, 24.22.3, 26.13.1 or later.
- liveChatter Attack Resource Consumption Technique for Large Language Models
Research · since 10 Nov 2026
Researchers demonstrated Chatter Attack, an attack technique that induces large language models into generating excessively long outputs during inference. The approach significantly drives up computational latency and operational hosting costs.
Do:Implement strict inference timeout thresholds and maximum output token limits to limit exposure to resource consumption attacks.
AI - liveAndroid GhostMap Android flaw lets malicious app trigger boot loop
Research · since 5 Nov 2026
Researchers discovered an Android vulnerability dubbed GhostMap that permits malicious applications to trap devices in an endless boot loop. The flaw can be triggered by apps requiring zero permissions following installation.
- liveCloakFEM CloakFEM: Agentic FEM Code Generation for Resource Exhaustion Attacks
Research · since 4 Nov 2026
Researchers introduce an agentic code generation approach to craft finite element method programs that force excessive computational resource consumption. The work demonstrates how attackers can leverage AI to perform denial-of-service attacks on scientific solvers.
AI - liveAndroid CVE-2026-58882: Android SMS of Death Proof-of-Concept Released
Research · since 31 Oct 2026 · CVE-2026-58882
A security researcher published a proof-of-concept exploit for CVE-2026-58882, an Android vulnerability enabling remote crashes via crafted SMS messages. The flaw affects unpatched devices running vulnerable versions of the operating system.
Do:Apply the latest Android security updates.
Earlier160
- closed7.1vLLM CVE-2026-126399: vLLM resource exhaustion vulnerability via video frame limits bypass
Patch now · Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126399
AI - closed8.2vLLM CVE-2026-126398: vLLM reachable assertion vulnerability in GPUModelRunner._init_xdrope_positions
Patch now · Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126398
AI - closed6.9vLLM CVE-2026-126394: vLLM resource exhaustion vulnerability in OpenCVDynamicOpenPanguVideoBackend
Patch now · Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126394
AI - closed8.7vLLM CVE-2026-126397: vLLM quadratic CPU work vulnerability in Cohere2 Vision multimodal preprocessing
Patch now · Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126397
AI - closed6.9vLLM CVE-2026-126396: vLLM resource exhaustion vulnerability in MiniMax M3 VL video processor
Patch now · Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126396
AI - closed4.3Langflow CVE-2026-104308: IBM Langflow OSS Command Injection Vulnerability
Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-104308
AI - closed8.7llama.cpp CVE-2026-119052: llama.cpp uncaught exception in ggml-rpc server
Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-119052
AI - closed7.5MCP SDKs MCP TypeScript SDK lacks request body size and batch length limits
Patch now · Disclosed · since 27 Oct 2026
AI - closed6.9llama.cpp CVE-2026-116467: llama.cpp Mirostat Sampler assertion vulnerability
Patch now · Disclosed · No patch yet · since 26 Oct 2026 · CVE-2026-116467
AI - closed6.5vLLM CVE-2026-115916: vLLM tokenizer off-by-one engine termination
Patch now · Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115916
AI - closed6.5vLLM CVE-2026-115914: vLLM multimodal OCR path denial of service
Patch now · Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115914
AI - closed6.5vLLM CVE-2026-115911: vLLM chat template denial of service vulnerability
Patch now · Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115911
AI - closed7.1vLLM CVE-2026-116181: vLLM input validation flaw permits engine crashes via out-of-vocabulary tokens
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116181
AI - closed8.7vLLM CVE-2026-116179: vLLM video frame-count cap bypass causes resource exhaustion and crash
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116179
AI - closed8.2vLLM CVE-2026-116172: vLLM Rust gRPC converter allows max_logprobs limit bypass and engine crash
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116172
AI - closed7.1vLLM CVE-2026-116175: vLLM audio processing path vulnerable to decompression bomb memory exhaustion
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116175
AI - closed8.2vLLM CVE-2026-116173: vLLM denial of service via logprob token limits bypass
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116173
AI - closed8.2vLLM CVE-2026-116178: vLLM denial of service via inconsistent multimodal metadata
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116178
AI - closed8.3vLLM CVE-2026-116180: vLLM denial of service vulnerability in tensor allocation
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116180
AI - closedvLLM vLLM Denial of Service through Multimodal UUID Cache Desynchronization
Patch now · Disclosed · since 21 Oct 2026
AI - closedvLLM vLLM Denial of Service via Unvalidated mm_processor_kwargs
Patch now · Disclosed · since 21 Oct 2026
AI - closed7.5vLLM CVE-2026-114055: vLLM Uncontrolled Resource Consumption via Multimodal Parameters
Patch now · Disclosed · since 21 Oct 2026 · updated 23 Oct 2026 · CVE-2026-114055
AI - closed8.7vLLM CVE-2026-114052: vLLM MOSS-Audio Model Serving Memory Exhaustion Vulnerability
Patch now · Disclosed · since 21 Oct 2026 · CVE-2026-114052
AI - closed7.5MCP SDKs CVE-2026-111768: MCP TypeScript SDK suffered from request validation memory exhaustion
Patch now · Disclosed · since 20 Oct 2026 · updated 5 Nov 2026 · CVE-2026-111768
AI - closed8.2SGLang CVE-2026-112266: SGLang request abortion denial of service vulnerability
Patch now · Disclosed · since 19 Oct 2026 · CVE-2026-112266
AI - closed7.1SGLang CVE-2026-112269: SGLang unauthenticated decode registration vulnerability
Patch now · Disclosed · since 19 Oct 2026 · CVE-2026-112269
AI - closed7.1SGLang CVE-2026-112270: SGLang uncontrolled memory allocation vulnerability
Patch now · Disclosed · since 19 Oct 2026 · CVE-2026-112270
AI - closed7.7SGLang CVE-2026-112082: SGLang Expert Distribution Endpoint Denial of Service Vulnerability
Patch now · Disclosed · since 19 Oct 2026 · CVE-2026-112082
AI - closed5.5SGLang CVE-2026-112083: SGLang Weight Exporter Denial of Service Vulnerability
Patch now · Disclosed · since 19 Oct 2026 · CVE-2026-112083
AI - closed7.5MCP SDKs Model Context Protocol Python SDK Unbounded HTTP Body Memory Buffer Vulnerability
Patch now · Disclosed · since 14 Oct 2026 · CVE-2026-109527
AI - closed8.7SGLang CVE-2026-109227: SGLang vulnerable to denial of service via unbounded memory allocation in video preprocessing
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109227
AI - closed7.1Open WebUI CVE-2026-109299: Open WebUI Denial of Service via Recurrence Rules
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109299
AI - closed7.1Open WebUI CVE-2026-109295: Open WebUI Regular Expression Denial of Service Vulnerability
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109295
AI - closed7.1Open WebUI CVE-2026-109294: Open WebUI vulnerable to memory exhaustion via crafted image URLs
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109294
AI - closed7.1Open WebUI CVE-2026-109297: Denial of service in Open WebUI recurrence rule validator
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109297
AI - closed6.9LangChain4j CVE-2026-108748: Memory exhaustion in Quarkus LangChain4j chat-scopes WebSocket
Patch now · Disclosed · since 11 Oct 2026 · CVE-2026-108748
AI - closed4.3Langflow CVE-2026-93679: IBM Langflow OSS denial of service vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93679
AI - closed4.3vLLM Denial of Service Vulnerability in vLLM Penalty Handler
Patch now · Disclosed · since 6 Oct 2026 · CVE-2026-105922
AI - closed5.3vLLM vLLM Denial of Service via Unbounded Video Sampler Frames
Patch now · Disclosed · since 5 Oct 2026 · CVE-2026-105758
AI - closed6.5vLLM vLLM loose cache_salt validation causes engine crash on LMCache-MP
Patch now · Disclosed · since 5 Oct 2026 · CVE-2026-105756
AI - closed6.5vLLM vLLM structured-output requests cause engine-fatal denial of service
Patch now · Disclosed · since 5 Oct 2026 · CVE-2026-105757
AI - closed6.5vLLM CVE-2026-105753: vLLM Multimodal IPC Cache Desync Denial of Service
Patch now · Disclosed · since 5 Oct 2026 · updated 6 Oct 2026 · CVE-2026-105753
AI - closed5.5vLLM CVE-2026-103241: Denial of service vulnerability in vLLM
Patch now · Exploited · since 30 Sep 2026 · CVE-2026-103241
AI - closed8.2vLLM vLLM Stop Token ID Boundary Validation Flaw Causes Service Crash
Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100652
AI - closed6.9vLLM CVE-2026-100647: vLLM denial-of-service vulnerability in cache_salt parameter
Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100647
AI - closed7.1vLLM CVE-2026-100654: vLLM flawed stop_token_ids validation causes CUDA error
Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100654
AI - closed8.7vLLM CVE-2026-94622: vLLM Denial of Service in NIXL Connector Metadata Handling
Patch now · Disclosed · since 21 Sep 2026 · CVE-2026-94622
AI - closed8.7vLLM vLLM P2P KV offloading denial of service vulnerability
Patch now · Disclosed · Patched · since 21 Sep 2026 · updated 27 Oct 2026 · CVE-2026-94624
AI - closed8.7vLLM vLLM NIXL connector denial of service vulnerability
Patch now · Disclosed · since 21 Sep 2026 · CVE-2026-94623
AI - closed8.7vLLM CVE-2026-93592: Input validation flaw in vLLM embeddings and pooling endpoints
Patch now · Disclosed · since 18 Sep 2026 · CVE-2026-93592
AI - closed6.9vLLM vLLM MoRIIO Acknowledgement Handler Resource Consumption Vulnerability
Patch now · Disclosed · since 16 Sep 2026 · CVE-2026-92220
AI - closed5.3vLLM CVE-2026-92365: Algorithmic complexity vulnerability in vLLM
Patch now · Disclosed · since 16 Sep 2026 · CVE-2026-92365
AI - closed6.5vLLM CVE-2026-57173: vLLM audio input handling out-of-memory flaw
Patch now · Disclosed · since 16 Sep 2026 · CVE-2026-57173
AI - closed6.5vLLM CVE-2026-69147: vLLM video backend GPU memory allocation flaw
Patch now · Disclosed · since 16 Sep 2026 · updated 17 Sep 2026 · CVE-2026-69147
AI - closed3.3vLLM CVE-2026-90713: Denial of service vulnerability in vLLM
Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-90713
AI - closed7.1vLLM CVE-2026-90555: vLLM Audio Transcription Memory Exhaustion
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90555
AI - closed7.5Flowise CVE-2026-90535: Flowise Denial of Service Vulnerability
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90535
AI - closed6.9vLLM CVE-2026-90554: vLLM audio decode size limit vulnerability
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90554
AI - closed7.5Open WebUI CVE-2026-87011: Open WebUI unauthenticated OIDC logout server stall vulnerability
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87011
AI - closed4.3Open WebUI CVE-2026-87013: Open WebUI Folder Loop Denial of Service Vulnerability
Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87013
AI - closed6.5Open WebUI Open WebUI server hang via cyclic chat message history
Patch now · Disclosed · since 9 Sep 2026 · CVE-2026-88002
AI - closed6.5Open WebUI Open WebUI server hang vulnerability via cyclic chat message deletion
Patch now · Disclosed · since 9 Sep 2026 · CVE-2026-88000
AI - closed7.5llama.cpp llama.cpp vulnerable to uncontrolled recursion and denial of service
Patch now · Disclosed · since 1 Sep 2026 · CVE-2026-52130
AI - closed7.5llama.cpp llama.cpp vulnerable to denial of service via negative top_n reranking value
Patch now · Disclosed · since 1 Sep 2026 · CVE-2026-52132
AI - closed7.5vLLM CVE-2026-37237: vLLM Unbounded Media Fetching Memory Exhaustion
Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-37237
AI - closed6.9vLLM CVE-2026-78684: vLLM DeepStream Decode Path Resource Control Bypass
Patch now · Disclosed · since 25 Aug 2026 · CVE-2026-78684
AI - closed4.3vLLM CVE-2026-71486: vLLM derender endpoints vulnerable to resource exhaustion
Patch now · Disclosed · since 17 Aug 2026 · updated 4 Sep 2026 · CVE-2026-71486
AI - closed6.5vLLM CVE-2026-73559: Denial of service vulnerability in vLLM completion prompt preprocessing
Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73559
AI - closed6.8vLLM CVE-2026-27765: Input validation flaw in vLLM Intel Gaudi plugin allows denial of service
Patch now · Disclosed · since 11 Aug 2026 · CVE-2026-27765
AI - closed6.8llama.cpp Null Pointer Dereference in LLaMA-Android JNI Wrapper
Patch now · Disclosed · since 6 Aug 2026 · CVE-2026-70639
AI - closed6.5Open WebUI CVE-2026-70489: Open WebUI automation recurrence parsing denial of service vulnerability
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70489
AI - closed3.3llama.cpp CVE-2026-18581: Reachable assertion vulnerability in llama.cpp parser
Patch now · Disclosed · since 3 Aug 2026 · CVE-2026-18581
AI - closed6.2MCP SDKs CVE-2026-63119: Unbounded IO Read Vulnerability in MCP Ruby SDK
Patch now · Disclosed · since 29 Jul 2026 · CVE-2026-63119
AI - closed7.5MCP SDKs CVE-2026-67432: Unbounded JSON-RPC Request Vulnerability in MCP Ruby SDK
Patch now · Disclosed · since 29 Jul 2026 · CVE-2026-67432
AI - closed5.3MCP SDKs CVE-2026-67430: Memory Exhaustion Vulnerability in MCP Ruby SDK
Patch now · Disclosed · since 29 Jul 2026 · CVE-2026-67430
AI - closed8.7Ollama CVE-2026-65315: Uncontrolled Memory Allocation in Ollama GGUF Parser
Patch now · Disclosed · since 21 Jul 2026 · CVE-2026-65315
AI - closed6.2NVIDIA TensorRT-LLM NVIDIA TensorRT-LLM Inference API Denial of Service CVE-2026-47475
Patch now · Disclosed · since 14 Jul 2026 · CVE-2026-47475
AI - closed6.2NVIDIA TensorRT-LLM CVE-2026-24271: NVIDIA TensorRT-LLM Resource Exhaustion Flaw
Patch now · Disclosed · since 14 Jul 2026 · CVE-2026-24271
AI - closed7.5Ollama CVE-2026-15685: Ollama downloadBlob Denial-of-Service Vulnerability
Patch now · Disclosed · since 13 Jul 2026 · CVE-2026-15685
AI - closed6.5Open WebUI CVE-2026-59220: Open WebUI ReDoS in skill-mention regexes causes DoS
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59220
AI - closed7.1vLLM vLLM denial of service via prompt embeds on M-RoPE models
Patch now · Disclosed · since 20 Jul 2026 · updated 20 Jul 2026 · CVE-2026-55514
AI - closed6.5vLLM CVE-2026-55646: vLLM speech-to-text enforces size limit after full file read
Patch now · Disclosed · since 17 Jul 2026 · updated 17 Jul 2026 · CVE-2026-55646
AI - closed7.5vLLM CVE-2026-54234: vLLM remote denial of service via invalid recovered token reinjection
Patch now · Disclosed · since 17 Jul 2026 · updated 17 Jul 2026 · CVE-2026-54234
AI - closed7.5Langflow CVE-2026-55446: Langflow unauthenticated DoS vulnerability in file upload
Patch now · Disclosed · since 19 Jun 2026 · updated 23 Jun 2026 · CVE-2026-55446
AI - closed9.3Langflow CVE-2026-55450: Langflow unauthenticated file upload leads to DoS and info leak
Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-55450
AI - closed6.9vLLM CVE-2026-54235: vLLM temperature validation bypass for NaN and Infinity values
Patch now · Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-54235
AI - closed6.5vLLM CVE-2026-54233: vLLM OOM Denial of Service via Audio Decompression
Patch now · Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-54233
AI - closed7.5vLLM CVE-2026-5497: vLLM vulnerable to OOM Denial of Service
Patch now · Disclosed · since 11 Jun 2026 · CVE-2026-5497
AI - closed7.1Langflow CVE-2026-7528: Denial of service in IBM Langflow OSS
Patch now · Disclosed · since 27 May 2026 · CVE-2026-7528
AI - closed5.5vLLM vLLM vulnerable to denial of service via OpenAI-compatible serving path
Patch now · Disclosed · since 26 May 2026 · CVE-2026-9540
AI - closed6.5Open WebUI CVE-2026-45667: Open WebUI unauthenticated embedding generation DoS vulnerability
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45667
AI - closed7.1Open WebUI CVE-2026-45399: Open WebUI background task disruption vulnerability
Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45399
AI - closed6.5vLLM vLLM speculative decoding crashes server via penalty parameters
Patch now · Disclosed · since 6 May 2026 · updated 12 May 2026 · CVE-2026-44223
AI - closed6.5vLLM CVE-2026-44222: vLLM vulnerable to remote DoS via special-token placeholders
Patch now · Disclosed · since 5 May 2026 · updated 12 May 2026 · CVE-2026-44222
AI - closed8.7MCP servers & tools CVE-2026-39313: Denial of service vulnerability in mcp-framework HTTP transport
Patch now · Disclosed · since 16 Apr 2026 · CVE-2026-39313
AI - closed6.5vLLM CVE-2026-34755: vLLM Denial of Service via Unbounded Base64 Frames
Patch now · Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-34755
AI - closed6.5vLLM CVE-2026-34756: vLLM Unauthenticated Denial of Service via Parameter
Patch now · Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-34756
AI - closed5.3LlamaIndex CVE-2025-6208: llama-index-core vulnerable to resource exhaustion
Patch now · Disclosed · since 2 Feb 2026 · CVE-2025-6208
AI - closed8.2LoLLMs CVE-2026-1117: Lollms improper access control in generation events
Patch now · Disclosed · since 2 Feb 2026 · CVE-2026-1117
AI - closed7.5Ollama CVE-2025-66959: Ollama Denial of Service via GGUF Decoder
Patch now · Disclosed · since 21 Jan 2026 · CVE-2025-66959
AI - closed7.5Ollama CVE-2025-66960: Ollama Denial of Service via GGUF Metadata
Patch now · Disclosed · since 21 Jan 2026 · CVE-2025-66960
AI - closed6.5vLLM CVE-2026-22773: vLLM Denial of Service via Idefics3 Vision Model Payload
Patch now · Disclosed · since 13 Jan 2026 · updated 13 Jan 2026 · CVE-2026-22773
AI - closed8.8vLLM CVE-2026-56340: vLLM introduces enhanced protection for sparse tensor validation DoS
Patch now · Disclosed · since 8 Jan 2026 · updated 20 Jun 2026 · CVE-2026-56340
AI - closed8.8vLLM CVE-2025-62164: vLLM memory corruption via unvalidated prompt-embedding tensors
Patch now · Disclosed · since 20 Nov 2025 · updated 21 Nov 2025 · CVE-2025-62164
AI - closed6.5vLLM CVE-2025-62426: vLLM Vulnerable to DoS via Chat Completion Request Parameters
Patch now · Disclosed · since 20 Nov 2025 · updated 21 Nov 2025 · CVE-2025-62426
AI - closed8.3vLLM CVE-2025-62372: vLLM vulnerable to denial of service via multimodal embedding inputs
Patch now · Disclosed · since 20 Nov 2025 · updated 21 Nov 2025 · CVE-2025-62372
AI - closed6.5vLLM CVE-2025-61620: vLLM resource exhaustion via malicious Jinja template
Patch now · Disclosed · since 7 Oct 2025 · CVE-2025-61620
AI - closed5.3Hugging Face libraries CVE-2025-6638: Hugging Face Transformers vulnerable to ReDoS via MarianTokenizer
Patch now · Disclosed · since 12 Sep 2025 · CVE-2025-6638
AI - closed8.6LlamaIndex CVE-2025-5302: LlamaIndex Denial of Service in JSONReader
Patch now · Disclosed · since 26 Aug 2025 · CVE-2025-5302
AI - closed7.5vLLM CVE-2025-48956: vLLM API Denial of Service via Large HTTP Headers
Patch now · Disclosed · since 21 Aug 2025 · CVE-2025-48956
AI - closed5.3Hugging Face libraries Hugging Face Transformers vulnerable to ReDoS in configuration utils
Patch now · Disclosed · since 7 Jul 2025 · CVE-2025-3263
AI - closed6.5LlamaIndex LlamaIndex vulnerable to DoS through recursive JSON parsing
Patch now · Disclosed · since 7 Jul 2025 · CVE-2025-5472
AI - closed5.3Hugging Face libraries Hugging Face Transformers vulnerable to ReDoS in get_imports
Patch now · Disclosed · since 7 Jul 2025 · CVE-2025-3264
AI - closed5.3Hugging Face libraries Hugging Face Transformers vulnerable to ReDoS in SETTING_RE
Patch now · Disclosed · since 7 Jul 2025 · CVE-2025-3262
AI - closed8.7MCP SDKs CVE-2025-53366: MCP Python SDK FastMCP Server Denial of Service Vulnerability
Patch now · Disclosed · since 4 Jul 2025 · CVE-2025-53366
AI - closed8.7MCP SDKs CVE-2025-53365: MCP Python SDK Denial of Service via Streamable HTTP Transport
Patch now · Disclosed · since 4 Jul 2025 · CVE-2025-53365
AI - closed6.5vLLM CVE-2025-48943: vLLM Denial of Service via Invalid Regex Output
Patch now · Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48943
AI - closed6.5vLLM CVE-2025-48942: vLLM Denial of Service via Invalid JSON Schema
Patch now · Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48942
AI - closed6.5vLLM CVE-2025-48944: vLLM Tool Schema Allows DoS via Malformed Fields
Patch now · Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48944
AI - closed7.5Ollama CVE-2025-1975: Ollama Server Vulnerable to Denial of Service Attack
Patch now · Disclosed · since 16 May 2025 · CVE-2025-1975
AI - closed7.5LlamaIndex CVE-2025-1752: LlamaIndex Vulnerable to Denial of Service via KnowledgeBaseWebReader
Patch now · Disclosed · since 10 May 2025 · CVE-2025-1752
AI - closed6.5vLLM CVE-2025-46560: vLLM vulnerable to denial of service via quadratic time complexity
Patch now · Disclosed · since 29 Apr 2025 · updated 30 Apr 2025 · CVE-2025-46560
AI - closed4.3Hugging Face libraries CVE-2025-1194: Transformers Regular Expression Denial of Service Vulnerability
Patch now · Disclosed · since 29 Apr 2025 · CVE-2025-1194
AI - closedvLLM vLLM Vulnerable to Denial of Service by Abusing XGrammar Cache
Patch now · Disclosed · since 15 Apr 2025
AI - closed7.5Gradio CVE-2025-0187: Denial of service vulnerability in Gradio file upload feature
Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0187
AI - closed7.5ChuanhuChatGPT CVE-2024-10650: ChuanhuChatGPT denial of service vulnerability
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-10650
AI - closed7.5Ollama CVE-2025-0315: Ollama Resource Exhaustion via Custom GGUF Models
Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0315
AI - closed7.5LiteLLM CVE-2024-10188: LiteLLM Vulnerable to Denial of Service
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-10188
AI - closed7.5Ollama CVE-2024-8063: Ollama Modelfile Processing Causes Denial of Service
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-8063
AI - closed7.5Ollama CVE-2025-0317: Ollama Divide-By-Zero Error Leads to Server Crash
Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0317
AI - closed7.5Ollama CVE-2025-0312: Ollama Null Pointer Dereference Causes Denial of Service
Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0312
AI - closed7.5Open WebUI CVE-2024-7983: Open WebUI Denial of Service via Markdown Endpoint
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7983
AI - closed7.5Gradio CVE-2024-10569: Gradio vulnerable to denial of service via zip bomb
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-10569
AI - closed7.5Ollama CVE-2024-12055: Ollama allows out-of-bounds read via crafted GGUF model
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12055
AI - closedOpen WebUI Open WebUI vulnerable to denial of service via starlette dependency
Patch now · Disclosed · since 20 Mar 2025
AI - closed5.9LlamaIndex CVE-2024-12910: LlamaIndex Uncontrolled Resource Consumption
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12910
AI - closed8.2Gradio CVE-2024-10648: Gradio Vulnerable to Arbitrary File Deletion
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-10648
AI - closed7.5Gradio CVE-2024-8966: Gradio denial of service via multipart boundary file upload
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-8966
AI - closedOpen WebUI Open WebUI Multipart Boundary Denial of Service
Patch now · Disclosed · since 20 Mar 2025
AI - closed7.5LiteLLM CVE-2024-8984: LiteLLM Denial of Service via Crafted HTTP Request
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-8984
AI - closed7.5Open WebUI CVE-2024-7036: Open WebUI Uncontrolled Resource Consumption
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7036
AI - closed7.5Ollama Ollama Server Vulnerable to Denial of Service via Crafted GZIP
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12886
AI - closed7.5Open WebUI CVE-2024-12537: Open WebUI Uncontrolled Resource Consumption vulnerability
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12537
AI - closed7.5Open WebUI CVE-2024-8053: Open WebUI Lacks Authentication for PDF Endpoint
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-8053
AI - closedOpen WebUI Open WebUI unauthenticated DoS vulnerability
Patch now · Disclosed · since 20 Mar 2025
AI - closed7.5LlamaIndex CVE-2024-12704: LlamaIndex denial of service vulnerability
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12704
AI - closed7.5Open WebUI CVE-2024-12534: Open WebUI Uncontrolled Resource Consumption Vulnerability
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12534
AI - closed7.5Gradio CVE-2024-10624: Gradio Vulnerable to Denial of Service via Crafted HTTP Request
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-10624
AI - closed6.5vLLM CVE-2025-29770: vLLM denial of service via outlines unbounded cache
Patch now · Disclosed · since 19 Mar 2025 · CVE-2025-29770
AI - closed7.5Ollama CVE-2024-39721: Ollama CreateModelHandler vulnerable to infinite blocking via dev random
Patch now · Disclosed · since 31 Oct 2024 · CVE-2024-39721
AI - closed8.8Ollama CVE-2024-39720: Ollama Out-of-bounds Read
Patch now · Disclosed · since 31 Oct 2024 · CVE-2024-39720
AI - closed7.1LoLLMs CVE-2024-6959: Lollms-webui denial of service vulnerability
Patch now · Disclosed · since 13 Oct 2024 · CVE-2024-6959
AI - closed8.7vLLM CVE-2024-8768: vLLM denial of service vulnerability
Patch now · Disclosed · since 17 Sep 2024 · CVE-2024-8768
AI - closed6.9vLLM CVE-2024-8939: vLLM Denial of Service via best_of parameter
Patch now · Disclosed · since 17 Sep 2024 · CVE-2024-8939
AI - closed8.7Flowise CVE-2024-8182: Flowise unauthenticated denial of service vulnerability
Patch now · Disclosed · since 27 Aug 2024 · CVE-2024-8182
AI - closed4.2LangChain family CVE-2024-2965: Denial of service in langchain-community SitemapLoader
Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-2965
AI - closed8.8llama.cpp CVE-2024-32878: Llama.cpp heap uninitialized variable vulnerability
Patch now · Disclosed · since 26 Apr 2024 · CVE-2024-32878
AI - closed8.6NVIDIA NeMo CVE-2024-0081: NVIDIA NeMo Framework Denial of Service Vulnerability
Patch now · Disclosed · since 5 Apr 2024 · CVE-2024-0081
AI - closed7.5AnythingLLM CVE-2024-22422: AnythingLLM unauthenticated API route denial of service
Patch now · Disclosed · since 19 Jan 2024 · CVE-2024-22422
AI - closed7.5Weaviate CVE-2023-38976: Weaviate Denial of Service Vulnerability
Patch now · Disclosed · since 21 Aug 2023 · CVE-2023-38976
AI