Security Advisories
A list of vulnerabilities (CVE / GHSA) publicly disclosed by Tencent Zhuque Lab. View as JSONopen_in_new
bug_report
Vulnerabilities
67
deployed_code
Products
21
leaderboard
Severity Breakdown
-
open_in_newHigh CVE-2025-6242 CWE-601/CWE-918
vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class
deployed_code Affected: vllm >= 0.5.0, < 0.11.0 calendar_today Published: October 07, 2025 -
open_in_newHigh CVE-2025-23312 CWE‑94
NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component
deployed_code Affected: NVIDIA All versions prior to 2.4.0 calendar_today Published: August 29, 2025 -
open_in_newHigh CVE-2025-57801 CWE-347
gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks
deployed_code Affected: gnark < 0.14.0 calendar_today Published: August 22, 2025 -
open_in_newHigh CVE-2025-30202 CWE-770
Data exposure via ZeroMQ on multi-node vLLM deployment
deployed_code Affected: vllm >= 0.5.2, < 0.8.5 calendar_today Published: April 29, 2025 -
open_in_newHigh CVE-2024-52804 CWE-400/CWE-770
Tornado has an HTTP cookie parsing DoS vulnerability
deployed_code Affected: tornado <= 6.4.1 calendar_today Published: November 22, 2024 -
open_in_newHigh CVE-2024-0082 CWE-269
NVIDIA ChatRTX Open File Request Improper Privilege Management
deployed_code Affected: Chat With RTX <= 0.2 calendar_today Published: April 08, 2024 -
open_in_newHigh CVE-2023-31036 CWE-23; CWE-22
NVIDIA Triton Inference Server Model Load API Relative Path Traversal
deployed_code Affected: Triton <2.40 calendar_today Published: January 12, 2024
Per page