CVE-2026-126394

The vLLM library (versions 0.30.0 before 0.31.0 ) contains a resource exhaustion vulnerability in the OpenCVDynamicOpenPanguVideoBackend . The issue stems from the component using request-controlled num_frames without an effective ceiling. Unauthenticated attackers can trigger a denial of service...