1089 matches found
CVE-2026-48746 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4, py3-vllm-cuda-12.9, py3-vllm-cuda-13.0...
GHSA-94F4-HR76-P5J6 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4, py3-vllm-cuda-12.9, py3-vllm-cuda-13.0...
GHSA-6V7P-G79W-8964 vulnerabilities
Vulnerabilities for packages: request-1276, datadog-agent-fips, superset-fips, openstack-keystone-2026.1-fips, openstack-kolla-toolbox-2026.1-fips, openstack-placement-2025.2, openstack-kolla-toolbox-2025.2, openstack-tempest-2026.1, openstack-kolla-toolbox-2025.1-fips, azure-functions-host,...
GHSA-4XGF-CPJX-PC3J vulnerabilities
Vulnerabilities for packages: airflow-core, semgrep, prefect, mcp-atlassian, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, prefect-fips, azureml-inference-server-http-fips, open-webui, tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-13.0, vllm-cuda-13.2,...
CVE-2026-54235 vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels
vLLM is an inference and serving engine for large language models LLMs. Prior to 0.23.1rc0, ll temperature validation gates use comparison operators , which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagat...
CVE-2026-54235
vLLM is an inference and serving engine for large language models LLMs. Prior to 0.23.1rc0, ll temperature validation gates use comparison operators , which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagat...
CVE-2026-50269 vulnerabilities
Vulnerabilities for packages: py3-vllm-cuda-12.4, airflow-core, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-12.9, py3.13-scanner-test-libraries-aiohttp, py3-vllm-cuda-13.0, airflow, py3-vllm-cuda-12.9...
GHSA-M6QW-4CW2-HM4M vulnerabilities
Vulnerabilities for packages: py3-vllm-cuda-12.4, airflow-core, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-12.9, py3.13-scanner-test-libraries-aiohttp, py3-vllm-cuda-13.0, airflow, py3-vllm-cuda-12.9...
vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving
Summary Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels csrc/quantization/gguf/ggufkernel.cu causes partial tensor processing. The output tensor is allocated at full size via torch::empty uninitialized memory, but the dequantize CUDA kernel processes only a truncated...
CVE-2026-53540 vulnerabilities
Vulnerabilities for packages: airflow-core, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, airflow, litellm, wazuh-manager-fips...
GHSA-V9PG-7XVM-68HF vulnerabilities
Vulnerabilities for packages: airflow-core, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, airflow, litellm, wazuh-manager-fips...
CVE-2026-53539 vulnerabilities
Vulnerabilities for packages: airflow-core, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, airflow, litellm, wazuh-manager-fips...
CVE-2026-53537 vulnerabilities
Vulnerabilities for packages: airflow-core, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, airflow, litellm, wazuh-manager-fips...
GHSA-6JV3-5F52-599M vulnerabilities
Vulnerabilities for packages: airflow-core, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, airflow, litellm, wazuh-manager-fips...
CVE-2026-54283 vulnerabilities
Vulnerabilities for packages: airflow-core, semgrep, prefect, mlflow, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, prefect-fips, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, airflow, litellm, nemo...
CVE-2026-54282 vulnerabilities
Vulnerabilities for packages: airflow-core, semgrep, prefect, mlflow, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, prefect-fips, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, airflow, litellm, nemo...
GHSA-82W8-QH3P-5JFQ vulnerabilities
Vulnerabilities for packages: airflow-core, semgrep, prefect, mlflow, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, prefect-fips, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, airflow, litellm, nemo...
GHSA-JP82-JPQV-5VV3 vulnerabilities
Vulnerabilities for packages: airflow-core, semgrep, prefect, mlflow, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, prefect-fips, tritonserver-backend-vllm-cuda-13.0, mlflow-fips, airflow, litellm, nemo...
GHSA-4FVR-RGM6-GQMC vulnerabilities
Vulnerabilities for packages: request-1276, mlflow-fips, py3.13-scanner-test-libraries-aiohttp, py3-vllm-cuda-13.0, apache-beam-python-3.11-sdk, tritonserver-backend-vllm-cuda-12.9, apache-beam-python-3.13-sdk, tritonserver-backend-vllm-cuda-13.0, open-webui, py3-vllm-cuda-12.9,...
GHSA-HPJ7-WQ8M-9HGP vulnerabilities
Vulnerabilities for packages: request-1276, mlflow-fips, py3.13-scanner-test-libraries-aiohttp, py3-vllm-cuda-13.0, apache-beam-python-3.11-sdk, tritonserver-backend-vllm-cuda-12.9, apache-beam-python-3.13-sdk, tritonserver-backend-vllm-cuda-13.0, open-webui, py3-vllm-cuda-12.9,...