Jiajia Liu

Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service

Mooncake Store through 0.3.13.post1 Missing Authorization in Replication Task RPC

Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue

Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString

Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server

Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write

LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service