netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-5wgp-vjxm-3x2r
GHSA-6qc9-v4r8-22xg
GHSA-9hcf-v7m4-6m2j
This commit is contained in:
advisory-database[bot]
2025-05-29 21:22:16 +00:00
parent aff971d5ef
commit a9404ad45d
3 changed files with 12 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2025/05/GHSA-5wgp-vjxm-3x2r/GHSA-5wgp-vjxm-3x2r.json
+4 -2
View File
File diff suppressed because one or more lines are too long
advisories/github-reviewed/2025/05/GHSA-6qc9-v4r8-22xg/GHSA-6qc9-v4r8-22xg.json
+4 -2
View File
File diff suppressed because one or more lines are too long
advisories/github-reviewed/2025/05/GHSA-9hcf-v7m4-6m2j/GHSA-9hcf-v7m4-6m2j.json
+4 -2
View File
@@ -1,9 +1,11 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9hcf-v7m4-6m2j",
"modified": "2025-05-28T19:42:12Z",
"modified": "2025-05-29T21:20:15Z",
"published": "2025-05-28T19:42:12Z",
"aliases": [],
"aliases": [
"CVE-2025-48943"
],
"summary": "vLLM allows clients to crash the openai server with invalid regex",
"details": "### Impact\n\nA denial of service bug caused the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to [GHSA-6qc9-v4r8-22xg](https://github.com/vllm-project/vllm/security/advisories/GHSA-6qc9-v4r8-22xg), but for regex instead of a JSON schema.\n\nIssue with more details: https://github.com/vllm-project/vllm/issues/17313\n\n### Patches\n\n* https://github.com/vllm-project/vllm/pull/17623",
"severity": [