Threats tagged 'pysec-2026-4362'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-114054vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache High7.12026-10-21GCVE DatabaseCVE-2026-114054 vLLM versions prior to 0.31.0 contain a cache aliasing vulnerability that allows authenticated attackers to cause collisions in shared cache keys by manipulating caller-controlled values such as EXIF ImageID or cache_salt. This can lead to attackers receiving cached processed media from other requests or reusing key-value state improperly. The vulnerability is fixed in version 0.31.0. Report on CVE-2026-114054 Vulnerability #pysec-2026-4362 #pypi	GCVE Database	2026-10-21

Page 1 of 1