{"schemaVersion":1,"generatedAt":"2026-11-03T11:57:51.530Z","from":"2026-10-28","through":"2026-11-03","severity":null,"type":null,"status":"ok","sources":{"ok":35,"total":36},"count":37,"advisories":[{"id":"ghsa:GHSA-j656-3hf2-fvjc","type":"advisory","advisoryId":"GHSA-j656-3hf2-fvjc","cveId":null,"title":"DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation","severity":"medium","cvssScore":6.1,"affected":[{"ecosystem":"npm","name":"@bytebase/dbhub"}],"matchedTerms":["prompt injection","ai agent","AI"],"disclosedAt":"2026-11-02","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-j656-3hf2-fvjc","summary":"Medium severity advisory GHSA-j656-3hf2-fvjc affecting @bytebase/dbhub. Patched in @bytebase/dbhub 0.22.6."},{"id":"incident:38b92803","type":"incident","advisoryId":"incident:38b92803","cveId":null,"title":"Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Langflow"}],"matchedTerms":["Langflow","AI"],"disclosedAt":"2026-11-02","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/11/critical-langflow-flaws-could-let.html","summary":"The Hacker News reported a security matter involving Langflow on 2026-11-02 (vulnerability, flaw, flaws). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:c5c227ed","type":"incident","advisoryId":"incident:c5c227ed","cveId":null,"title":"New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude"},{"ecosystem":"product","name":"Gemini"},{"ecosystem":"product","name":"Kimi"}],"matchedTerms":["Claude","Gemini","Kimi","large language model","LLM","AI"],"disclosedAt":"2026-11-02","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/11/new-volta-infostealer-uses-claude.html","summary":"The Hacker News reported a security matter involving Claude, Gemini, Kimi on 2026-11-02 (malware, infostealer). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:CVE-2026-105811","type":"incident","advisoryId":"CVE-2026-105811","cveId":"CVE-2026-105811","title":"CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Amazon Q"}],"matchedTerms":["Amazon Q"],"disclosedAt":"2026-11-02","exploitation":null,"sourceId":"aws-security-bulletins","sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-126-aws","summary":"AWS security bulletins reported a security matter involving Amazon Q on 2026-11-02 (security bulletin). Tracks CVE-2026-105811."},{"id":"incident:CVE-2026-116635","type":"incident","advisoryId":"CVE-2026-116635","cveId":"CVE-2026-116635","title":"CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server","severity":"unknown","cvssScore":null,"affected":[],"matchedTerms":["mcp server"],"disclosedAt":"2026-11-02","exploitation":null,"sourceId":"aws-security-bulletins","sourceUrl":"https://aws.amazon.com/security/security-bulletins/rss/2026-164-aws","summary":"AWS security bulletins reported a security matter on 2026-11-02 (security bulletin). Tracks CVE-2026-116635."},{"id":"incident:CVE-2026-98432","type":"incident","advisoryId":"CVE-2026-98432","cveId":"CVE-2026-98432","title":"Backporting security fixes at scale with Codex","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Codex"},{"ecosystem":"product","name":"OpenAI"}],"matchedTerms":["Codex","OpenAI"],"disclosedAt":"2026-11-02","exploitation":null,"sourceId":"trail-of-bits","sourceUrl":"https://blog.trailofbits.com/2026/11/02/backporting-security-fixes-at-scale-with-codex","summary":"Trail of Bits blog reported a security matter involving Codex, OpenAI on 2026-11-02 (vulnerability, vulnerabilities, flaw). Tracks CVE-2026-98432."},{"id":"incident:dbc90a46","type":"incident","advisoryId":"incident:dbc90a46","cveId":null,"title":"Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude Code"},{"ecosystem":"product","name":"Cursor"}],"matchedTerms":["Claude Code","Cursor"],"disclosedAt":"2026-11-01","exploitation":null,"sourceId":"stepsecurity","sourceUrl":"https://www.stepsecurity.io/blog/claude-code-extension-trojanized","summary":"StepSecurity blog reported a security matter involving Claude Code, Cursor on 2026-11-01 (backdoor). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:40a14f1c","type":"incident","advisoryId":"incident:40a14f1c","cveId":null,"title":"A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"ChatGPT"},{"ecosystem":"product","name":"OpenAI"}],"matchedTerms":["ChatGPT","OpenAI"],"disclosedAt":"2026-10-31","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/10/a-shared-chatgpt-link-could-run.html","summary":"The Hacker News reported a security matter involving ChatGPT, OpenAI on 2026-10-31 (flaw, malicious). No CVE is referenced; verify with the vendor before acting."},{"id":"ghsa:GHSA-j63v-mwhm-56jx","type":"advisory","advisoryId":"GHSA-j63v-mwhm-56jx","cveId":"CVE-2026-118763","title":"@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location","severity":"high","cvssScore":7.4,"affected":[{"ecosystem":"npm","name":"@sigstore/oci"}],"matchedTerms":["AI"],"disclosedAt":"2026-10-30","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-j63v-mwhm-56jx","summary":"High severity advisory GHSA-j63v-mwhm-56jx (CVE-2026-118763) affecting @sigstore/oci. Patched in @sigstore/oci 0.7.2."},{"id":"incident:17174e35","type":"incident","advisoryId":"incident:17174e35","cveId":null,"title":"Anthropic: That Claude Code extension compromise… couldn't be us","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude Code"},{"ecosystem":"product","name":"Anthropic"},{"ecosystem":"product","name":"Cursor"}],"matchedTerms":["Claude Code","Anthropic","Cursor"],"disclosedAt":"2026-10-30","exploitation":null,"sourceId":"the-register-security","sourceUrl":"https://www.theregister.com/cyber-crime/2026/10/30/anthropic-that-claude-code-extension-compromise-couldnt-be-us/5306682","summary":"The Register security reported a security matter involving Claude Code, Anthropic, Cursor on 2026-10-30 (flaw, backdoor, malicious). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:3a3d44de","type":"incident","advisoryId":"incident:3a3d44de","cveId":null,"title":"Malicious Claude Code extension on Cursor planted SSH backdoors","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude Code"},{"ecosystem":"product","name":"Cursor"},{"ecosystem":"product","name":"Anthropic"}],"matchedTerms":["Claude Code","Cursor","Anthropic"],"disclosedAt":"2026-10-30","exploitation":null,"sourceId":"bleepingcomputer","sourceUrl":"https://www.bleepingcomputer.com/news/security/malicious-claude-code-extension-on-cursor-planted-ssh-backdoors","summary":"BleepingComputer reported a security matter involving Claude Code, Cursor, Anthropic on 2026-10-30 (malicious, malware). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:8466af95","type":"incident","advisoryId":"incident:8466af95","cveId":null,"title":"Compromised Claude Code extensions (versions 2.1.312 & 2.1.313) in Cursor try to install a backdoor","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude Code"},{"ecosystem":"product","name":"Cursor"},{"ecosystem":"product","name":"Anthropic"}],"matchedTerms":["Claude Code","Cursor","Anthropic","AI"],"disclosedAt":"2026-10-30","exploitation":null,"sourceId":"ox-security","sourceUrl":"https://www.ox.security/blog/malicious-claude-code-extension-cursor-ssh-backdoor","summary":"OX Security research reported a security matter involving Claude Code, Cursor, Anthropic on 2026-10-30 (vulnerability, backdoor, malicious). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:ea6ac210","type":"incident","advisoryId":"incident:ea6ac210","cveId":null,"title":"Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude Code"},{"ecosystem":"product","name":"Cursor"},{"ecosystem":"product","name":"Anthropic"}],"matchedTerms":["Claude Code","Cursor","Anthropic"],"disclosedAt":"2026-10-30","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html","summary":"The Hacker News reported a security matter involving Claude Code, Cursor, Anthropic on 2026-10-30 (backdoor, malicious). No CVE is referenced; verify with the vendor before acting."},{"id":"ghsa:GHSA-26mh-57q7-jfvr","type":"advisory","advisoryId":"GHSA-26mh-57q7-jfvr","cveId":"CVE-2026-61438","title":"PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox","severity":"high","cvssScore":7.3,"affected":[{"ecosystem":"pip","name":"praisonai"}],"matchedTerms":["AI"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-26mh-57q7-jfvr","summary":"High severity advisory GHSA-26mh-57q7-jfvr (CVE-2026-61438) affecting praisonai. Patched in praisonai 4.6.78."},{"id":"ghsa:GHSA-w9x9-j56r-h98r","type":"advisory","advisoryId":"GHSA-w9x9-j56r-h98r","cveId":null,"title":"@eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy","severity":"high","cvssScore":8.2,"affected":[{"ecosystem":"npm","name":"@eeacms/volto-chatbot"}],"matchedTerms":["chatbot"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-w9x9-j56r-h98r","summary":"High severity advisory GHSA-w9x9-j56r-h98r affecting @eeacms/volto-chatbot. Patched in @eeacms/volto-chatbot 2.0.4."},{"id":"incident:250ac89f","type":"incident","advisoryId":"incident:250ac89f","cveId":null,"title":"Claude Model Builds Exploits Across Major Browsers & OSes","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude"}],"matchedTerms":["Claude"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"dark-reading","sourceUrl":"https://www.darkreading.com/application-security/claude-model-exploits-major-browsers-oses","summary":"Dark Reading reported a security matter involving Claude on 2026-10-29 (exploits). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:71f9eb62","type":"incident","advisoryId":"incident:71f9eb62","cveId":null,"title":"Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Claude"},{"ecosystem":"product","name":"ChatGPT"},{"ecosystem":"product","name":"Anthropic"},{"ecosystem":"product","name":"OpenAI"},{"ecosystem":"product","name":"GPT-5"}],"matchedTerms":["Claude","ChatGPT","Anthropic","OpenAI","GPT-5"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/10/fake-chatgpt-and-claude-apps-abuse.html","summary":"The Hacker News reported a security matter involving Claude, ChatGPT, Anthropic, OpenAI and 1 more on 2026-10-29 (malicious, malware). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:81725f5f","type":"incident","advisoryId":"incident:81725f5f","cveId":null,"title":"Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"OpenAI"},{"ecosystem":"product","name":"Claude Desktop"},{"ecosystem":"product","name":"Anthropic"},{"ecosystem":"product","name":"Codex"},{"ecosystem":"product","name":"GitHub Copilot"},{"ecosystem":"product","name":"Cursor"}],"matchedTerms":["OpenAI","Claude Desktop","Anthropic","Codex","GitHub Copilot","Cursor","prompt injection"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"the-register-security","sourceUrl":"https://www.theregister.com/security/2026/10/29/researchers-find-bugs-in-5-ai-developer-tools-with-openai-and-microsoft-flaws-still-unpatched/5306508","summary":"The Register security reported a security matter involving OpenAI, Claude Desktop, Anthropic, Codex and 2 more on 2026-10-29 (vulnerability, vulnerabilities, flaw). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:e9e91cfc","type":"incident","advisoryId":"incident:e9e91cfc","cveId":null,"title":"Cohere’s Qwen Story: Looks More Like Model Jaggedness","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Qwen"},{"ecosystem":"product","name":"vLLM"}],"matchedTerms":["Qwen","vLLM","AI"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"checkpoint-research","sourceUrl":"https://research.checkpoint.com/2026/coheres-qwen-story-looks-more-like-model-jaggedness","summary":"Check Point Research reported a security matter involving Qwen, vLLM on 2026-10-29 (backdoor). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:f3663a8f","type":"incident","advisoryId":"incident:f3663a8f","cveId":null,"title":"Hugging Face malware campaign returns to hijack GPUs for crypto mining","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Hugging Face"}],"matchedTerms":["Hugging Face","AI"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"bleepingcomputer","sourceUrl":"https://www.bleepingcomputer.com/news/security/hugging-face-malware-campaign-returns-to-hijack-gpus-for-crypto-mining","summary":"BleepingComputer reported a security matter involving Hugging Face on 2026-10-29 (malware, hijack). No CVE is referenced; verify with the vendor before acting."},{"id":"incident:fde2c075","type":"incident","advisoryId":"incident:fde2c075","cveId":null,"title":"Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Gemini"}],"matchedTerms":["Gemini","agentic"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/10/googles-gemini-4-carbon-leads.html","summary":"The Hacker News reported a security matter involving Gemini on 2026-10-29 (vulnerabilities, exploitation). No CVE is referenced; verify with the vendor before acting."},{"id":"osv:MAL-2026-2144","type":"incident","advisoryId":"MAL-2026-2144","cveId":null,"title":"Malicious code in litellm (PyPI)","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"pypi","name":"litellm"}],"matchedTerms":["litellm"],"disclosedAt":"2026-10-29","exploitation":null,"sourceId":"osv-malicious","sourceUrl":"https://osv.dev/vulnerability/MAL-2026-2144","summary":"OSV lists litellm (pypi) as malicious in MAL-2026-2144, versions 1.82.7, 1.82.8, 1.107.0. Remove or pin away from the affected versions."},{"id":"ghsa:GHSA-3fx2-cqw9-xr3c","type":"advisory","advisoryId":"GHSA-3fx2-cqw9-xr3c","cveId":"CVE-2026-118667","title":"LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests","severity":"medium","cvssScore":4.3,"affected":[{"ecosystem":"pip","name":"langgraph-sdk"},{"ecosystem":"pip","name":"langgraph"}],"matchedTerms":["langgraph"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-3fx2-cqw9-xr3c","summary":"Medium severity advisory GHSA-3fx2-cqw9-xr3c (CVE-2026-118667) affecting langgraph-sdk, langgraph. Patched in langgraph-sdk 0.4.6."},{"id":"ghsa:GHSA-48m4-24cq-37qf","type":"advisory","advisoryId":"GHSA-48m4-24cq-37qf","cveId":"CVE-2026-115919","title":"ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)","severity":"medium","cvssScore":6.2,"affected":[{"ecosystem":"pip","name":"onnx"}],"matchedTerms":["onnx"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-48m4-24cq-37qf","summary":"Medium severity advisory GHSA-48m4-24cq-37qf (CVE-2026-115919) affecting onnx. Patched in onnx 1.22.0."},{"id":"ghsa:GHSA-5324-3w58-qpp2","type":"advisory","advisoryId":"GHSA-5324-3w58-qpp2","cveId":"CVE-2026-116575","title":"Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)","severity":"medium","cvssScore":6.3,"affected":[{"ecosystem":"pip","name":"mem0ai"},{"ecosystem":"npm","name":"mem0ai"}],"matchedTerms":["mem0ai","LLM"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-5324-3w58-qpp2","summary":"Medium severity advisory GHSA-5324-3w58-qpp2 (CVE-2026-116575) affecting mem0ai. Patched in mem0ai 2.0.18."},{"id":"ghsa:GHSA-542m-9234-8gvf","type":"advisory","advisoryId":"GHSA-542m-9234-8gvf","cveId":"CVE-2026-115911","title":"vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool","severity":"medium","cvssScore":6.5,"affected":[{"ecosystem":"pip","name":"vllm"}],"matchedTerms":["vllm"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-542m-9234-8gvf","summary":"Medium severity advisory GHSA-542m-9234-8gvf (CVE-2026-115911) affecting vllm. Patched in vllm 0.32.0."},{"id":"ghsa:GHSA-6757-hggm-hp2w","type":"advisory","advisoryId":"GHSA-6757-hggm-hp2w","cveId":"CVE-2026-115912","title":"vLLM: Public multimodal SHM handle forgery reaches worker-side pickle.loads() with insecure serialization disabled","severity":"high","cvssScore":7.5,"affected":[{"ecosystem":"pip","name":"vllm"}],"matchedTerms":["vllm"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-6757-hggm-hp2w","summary":"High severity advisory GHSA-6757-hggm-hp2w (CVE-2026-115912) affecting vllm. Patched in vllm 0.32.0."},{"id":"ghsa:GHSA-6pwm-x34p-fvj2","type":"advisory","advisoryId":"GHSA-6pwm-x34p-fvj2","cveId":"CVE-2026-115920","title":"ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank","severity":"medium","cvssScore":6.2,"affected":[{"ecosystem":"pip","name":"onnx"}],"matchedTerms":["onnx"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-6pwm-x34p-fvj2","summary":"Medium severity advisory GHSA-6pwm-x34p-fvj2 (CVE-2026-115920) affecting onnx. Patched in onnx 1.22.0."},{"id":"ghsa:GHSA-8397-8qf6-f2gm","type":"advisory","advisoryId":"GHSA-8397-8qf6-f2gm","cveId":"CVE-2026-115913","title":"vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine","severity":"medium","cvssScore":6.5,"affected":[{"ecosystem":"pip","name":"vllm"}],"matchedTerms":["vllm","pytorch"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-8397-8qf6-f2gm","summary":"Medium severity advisory GHSA-8397-8qf6-f2gm (CVE-2026-115913) affecting vllm. Patched in vllm 0.32.0."},{"id":"ghsa:GHSA-gq5q-89c7-vhvx","type":"advisory","advisoryId":"GHSA-gq5q-89c7-vhvx","cveId":"CVE-2026-115914","title":"vLLM DeepSeek-OCR image processing vulnerable to denial of service","severity":"medium","cvssScore":6.5,"affected":[{"ecosystem":"pip","name":"vllm"}],"matchedTerms":["vllm"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-gq5q-89c7-vhvx","summary":"Medium severity advisory GHSA-gq5q-89c7-vhvx (CVE-2026-115914) affecting vllm. Patched in vllm 0.32.0."},{"id":"ghsa:GHSA-h3rc-j82p-2c3h","type":"advisory","advisoryId":"GHSA-h3rc-j82p-2c3h","cveId":"CVE-2026-115915","title":"vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE","severity":"high","cvssScore":8.1,"affected":[{"ecosystem":"pip","name":"vllm"}],"matchedTerms":["vllm"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-h3rc-j82p-2c3h","summary":"High severity advisory GHSA-h3rc-j82p-2c3h (CVE-2026-115915) affecting vllm. Patched in vllm 0.32.0."},{"id":"ghsa:GHSA-m4pr-6v3c-6fgr","type":"advisory","advisoryId":"GHSA-m4pr-6v3c-6fgr","cveId":"CVE-2026-115921","title":"ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute","severity":"medium","cvssScore":6.2,"affected":[{"ecosystem":"pip","name":"onnx"}],"matchedTerms":["onnx"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-m4pr-6v3c-6fgr","summary":"Medium severity advisory GHSA-m4pr-6v3c-6fgr (CVE-2026-115921) affecting onnx. Patched in onnx 1.22.0."},{"id":"ghsa:GHSA-q69g-f4f5-v8m7","type":"advisory","advisoryId":"GHSA-q69g-f4f5-v8m7","cveId":"CVE-2026-115922","title":"ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs","severity":"medium","cvssScore":6.2,"affected":[{"ecosystem":"pip","name":"onnx"}],"matchedTerms":["onnx"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-q69g-f4f5-v8m7","summary":"Medium severity advisory GHSA-q69g-f4f5-v8m7 (CVE-2026-115922) affecting onnx. Patched in onnx 1.22.0."},{"id":"ghsa:GHSA-q97c-p368-75c4","type":"advisory","advisoryId":"GHSA-q97c-p368-75c4","cveId":"CVE-2026-115916","title":"vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)","severity":"medium","cvssScore":6.5,"affected":[{"ecosystem":"pip","name":"vllm"}],"matchedTerms":["vllm"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-q97c-p368-75c4","summary":"Medium severity advisory GHSA-q97c-p368-75c4 (CVE-2026-115916) affecting vllm. Patched in vllm 0.32.0."},{"id":"ghsa:GHSA-vvpg-rrww-wpmh","type":"advisory","advisoryId":"GHSA-vvpg-rrww-wpmh","cveId":"CVE-2026-115917","title":"vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server","severity":"low","cvssScore":3.4,"affected":[{"ecosystem":"pip","name":"vllm"}],"matchedTerms":["vllm"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-vvpg-rrww-wpmh","summary":"Low severity advisory GHSA-vvpg-rrww-wpmh (CVE-2026-115917) affecting vllm. Patched in vllm 0.32.0."},{"id":"ghsa:GHSA-x567-49g5-p4cf","type":"advisory","advisoryId":"GHSA-x567-49g5-p4cf","cveId":"CVE-2026-115918","title":"vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs","severity":"medium","cvssScore":6.5,"affected":[{"ecosystem":"pip","name":"vllm"}],"matchedTerms":["vllm"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"ghsa","sourceUrl":"https://github.com/advisories/GHSA-x567-49g5-p4cf","summary":"Medium severity advisory GHSA-x567-49g5-p4cf (CVE-2026-115918) affecting vllm. Patched in vllm 0.32.0."},{"id":"incident:386fae52","type":"incident","advisoryId":"incident:386fae52","cveId":null,"title":"Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits","severity":"unknown","cvssScore":null,"affected":[{"ecosystem":"product","name":"Anthropic"}],"matchedTerms":["Anthropic","AI"],"disclosedAt":"2026-10-28","exploitation":null,"sourceId":"the-hacker-news","sourceUrl":"https://thehackernews.com/2026/10/anthropics-unreleased-ai-model-chains.html","summary":"The Hacker News reported a security matter involving Anthropic on 2026-10-28 (flaw, flaws, exploits). No CVE is referenced; verify with the vendor before acting."}]}