Comparison Overview
Aéropostale
Aéropostale
11 Pennsylvania Plaza, New York, 10001, US
Last Update: 23/02/2026
Aéropostale is a specialty retailer of casual apparel and accessories for guys and girls ages 18-22. Through the brand’s Oneness ethos, Aéropostale embraces acceptance, empathy and respect to promote a sense of unity among its loyal customers and in communities around t...
Jerónimo Martins
Rua Actor Antonio Silva 7, Lisbon, 1600-404, PT
Last Update: 02/04/2026
Founded in 1792, Jerónimo Martins is an international Group based in Portugal that operates in the food distribution and specialised retail sectors. Present in 6 countries and counting with more than 6 thousand stores, we are one of the oldest retailers in the world. ...
Compliance Ranges Comparison
Aéropostale
Jerónimo Martins
Benchmark & Cyber Underwriting Signals
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for Aéropostale in 2026.
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for Jerónimo Martins in 2026.
Incident History - Aéropostale (X = Date, Y = Severity)
Aéropostale cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Jerónimo Martins (X = Date, Y = Severity)
Jerónimo Martins cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Aéropostale
Jerónimo Martins
FAQ
Latest Global CVEs
vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with max_tokens=0 to exhaust decode-worker memory without bound until the worker restarts.
- https://github.com/vllm-project/vllm
- https://github.com/vllm-project/vllm/blob/v0.29.0/vllm/distributed/kv_transfer/kv_connector/v1/nixl/push_worker.py#L162-L181
- https://github.com/vllm-project/vllm/pull/55677
- https://www.vulncheck.com/advisories/vllm-through-0.29.0-memory-exhaustion-via-rejected-requests
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust the V8 call stack, causing an uncaught RangeError that terminates the Node.js process without triggering error handling callbacks.
- https://github.com/NodeRedis/node-redis-parser
- https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L204-L213
- https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L291-L306
- https://github.com/redis/ioredis/issues/2108
- https://www.vulncheck.com/advisories/redis-parser-through-3.0.0-denial-of-service-via-unbounded-recursion
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.