Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
blaizzy/mlx-vlm
main @ 78b96eb
3
Fixes
0
CVEs
MEDIUM
Peak severity
33.3%
Coverage
Highlights
Auth Bypass: 1 prior fix. Scrutinize any change in this area.
mlx_vlm/apc.py: most-fixed (2 issues). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Information Disclosure: Cross-tenant cache hit timing side-channels in the Automatic Prefix Cache (APC) can allow an attacker to detect the presence of previous requests and disclose sensitive prompt prefixes. Defenses require strict isolation using tenant-scoped salt-based hashing.
Denial of Service: Shared global configurations (such as stopping criteria token lists) are susceptible to mutation from individual request parameters. Failure to make defensive copies of list inputs leads to state contamination, early generation termination, and information leakage across unrelated requests.
Auth Bypass: A lack of strong tenant boundaries in prefix caching allows cache key collision or timing-based detection across logical tenant partitions, bypassing isolation mechanisms unless salted with unique identifiers.