[ Vendor · 2 CVEs ]
cheaper-inference
CVEs affecting cheaper-inference published in the last 30 days, plus any cheaper-inference CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-118984 | 29 Oct 2026 | CVSS 5.5 | cheaper-inference OmniRouteOmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or admin-scoped API keys or oma_… | |
| CVE-2026-116634 | 26 Oct 2026 | CVSS 5.9 | cheaper-inference OmniRouteOmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST… |