Comparison Overview
OAS S.A.
OAS S.A.
Avenida Luiz Viana Filho 6462 13 andar Salvador, Bahia 41730-101, BR
Last Update: 06/05/2026
Somos uma empresa de engenharia, cuja missão é superar as expectativas dos nossos clientes através da transformação dos ambientes de forma inovadora, responsável e sustentável para esta e para as próximas gerações. Temos expertise em grandes obras da construção civil e ...
AECOM
13355 Noel Road, Dallas, 75240, US
Last Update: 17/09/2026
AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients’ complex challenges in water, environment, energy, transportation and buildings. Our team...
Compliance Ranges Comparison
OAS S.A.
AECOM
Benchmark & Cyber Underwriting Signals
Incidents vs Civil Engineering Industry Avg (This Year)
No incidents recorded for OAS S.A. in 2026.
Incidents vs Civil Engineering Industry Avg (This Year)
AECOM has 2.91% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - OAS S.A. (X = Date, Y = Severity)
OAS S.A. cyber incidents detection timeline including parent company and subsidiaries.
Incident History - AECOM (X = Date, Y = Severity)
AECOM cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
OAS S.A.
AECOM
FAQ
Latest Global CVEs
vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with max_tokens=0 to exhaust decode-worker memory without bound until the worker restarts.
- https://github.com/vllm-project/vllm
- https://github.com/vllm-project/vllm/blob/v0.29.0/vllm/distributed/kv_transfer/kv_connector/v1/nixl/push_worker.py#L162-L181
- https://github.com/vllm-project/vllm/pull/55677
- https://www.vulncheck.com/advisories/vllm-through-0.29.0-memory-exhaustion-via-rejected-requests
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust the V8 call stack, causing an uncaught RangeError that terminates the Node.js process without triggering error handling callbacks.
- https://github.com/NodeRedis/node-redis-parser
- https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L204-L213
- https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L291-L306
- https://github.com/redis/ioredis/issues/2108
- https://www.vulncheck.com/advisories/redis-parser-through-3.0.0-denial-of-service-via-unbounded-recursion
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.