API - API Security Blog

CVE-2025-32802

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured ...

May 28, 2025

CVE-2022-43496

creation_timestamp| type| source ---|---|--- 2025-05-28 19:55:15+00:00| seen|...Read More ...

May 28, 2025

CVE-2022-43502

creation_timestamp| type| source ---|---|--- 2025-05-28 20:04:33+00:00| seen|...Read More ...

May 28, 2025

CVE-2025-5256

creation_timestamp| type| source ---|---|--- 2025-05-28 18:24:13+00:00| seen|...Read More ...

May 28, 2025

CVE-2025-32801

Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the contro ...

May 28, 2025

vLLM DOS: Remotely kill vllm over http with invalid JSON schema

Summary Hitting the /v1/completions API with a invalid json_schema as a Guided Param will kill the vllm server Details The following API call (venv) [derekh@ip-172-31-15-108 ]$ curl -s https://localh ...

May 28, 2025

CVE-2022-43493

creation_timestamp| type| source ---|---|--- 2025-05-28 19:51:30+00:00| seen|...Read More ...

May 28, 2025

CVE-2025-31500

creation_timestamp| type| source ---|---|--- 2025-05-28 18:24:36+00:00| seen|...Read More ...

May 28, 2025