Coding Agent Usage Simulation

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Certifi removes GLOBALTRUST root certificate

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service

HuggingFace transformers vulnerable to remote code execution

Starlette has possible denial-of-service vector when parsing large files in multipart forms

Hydra: hydra.utils.instantiate with untrusted config can lead to code execution

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

aiohttp: Multiple instances of excessive or unbounded memory/CPU use

vLLM affected by RCE via auto_map dynamic module loading during model initialization

vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`

AIOHTTP has CRLF injection through multipart part content type header construction

urllib3 streaming API improperly handles highly compressed data

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

PyTorch susceptible to local Denial of Service

Hugging Face Datasets folder-based builders allow path traversal through file_name metadata

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

Sentencepiece has a a heap overflow issue

cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads

vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class

LMCache: 16-bit multimodal hash collision can poison KV cache entries

Pillow: TarIO negative size field causes infinite CPU-spin loop

vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

dnspython dns.name.from_wire_parser() excessive CPU use

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m

urllib3 does not control redirects in browsers and Node.js

AIOHTTP: Secure attribute not enforced for shared cookie

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching

vLLM has RCE In Video Processing

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

AIOHTTP vulnerable to brute-force leak of internal static file path components