API - API Security Blog

CVE-2025-32802

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured ...

May 28, 2025

CVE-2022-43493

creation_timestamp| type| source ---|---|--- 2025-05-28 19:51:30+00:00| seen|...Read More ...

May 28, 2025

vLLM DOS: Remotely kill vllm over http with invalid JSON schema

Summary Hitting the /v1/completions API with a invalid json_schema as a Guided Param will kill the vllm server Details The following API call (venv) [derekh@ip-172-31-15-108 ]$ curl -s https://localh ...

May 28, 2025

CVE-2022-43496

creation_timestamp| type| source ---|---|--- 2025-05-28 19:55:15+00:00| seen|...Read More ...

May 28, 2025

CVE-2022-40970

creation_timestamp| type| source ---|---|--- 2025-05-28 20:19:35+00:00| seen|...Read More ...

May 28, 2025

CVE-2022-38092

creation_timestamp| type| source ---|---|--- 2025-05-28 19:59:32+00:00| seen|...Read More ...

May 28, 2025

CVE-2022-43502

creation_timestamp| type| source ---|---|--- 2025-05-28 20:04:33+00:00| seen|...Read More ...

May 28, 2025

CVE-2025-32803

creation_timestamp| type| source ---|---|--- 2025-05-28 16:54:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lqao5l566x2j 2025-05-28 17:21:12+00:00| seen| https://bsky.app/profil ...

May 28, 2025