1481 matches found
CVE-2026-22773: Allocation of Resources Without Limits or Throttling
vLLM is an inference and serving engine for large language models LLMs. In versions from 0.6.4 to before 0.12.0, users can crash the vLLM engine serving multimodal models that use the Idefics3 vision model implementation by sending a specially crafted 1x1 pixel image. This causes a tensor dimensi...
vLLM 安全漏洞
vLLM is vLLM open source a high throughput and memory efficient inference and service engine for LLM. A security vulnerability exists in vLLM version 0.6.4 up to and including version 0.12.0, which stems from the fact that sending specially crafted 1x1 pixel images results in a tensor dimension...
GHSA-MCMC-2M55-J8JJ vLLM introduced enhanced protection for CVE-2025-62164
Summary The fix here for CVE-2025-62164 is not sufficient. The fix only disables prompt embeds by default rather than addressing the root cause, so the DoS vulnerability remains when the feature is enabled. Details vLLM's pending change attempts to fix the root cause, which is the missing sparse...
GHSA-HF3C-WXG2-49Q9 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm...
CVE-2023-48022 vulnerabilities
Vulnerabilities for packages: py3-vllm-cuda-12.4...
GHSA-6WGJ-66M2-XXP2 vulnerabilities
Vulnerabilities for packages: py3-vllm-cuda-12.4...
vLLM: undisclosed vulnerability (ZAI-2026-KBTXK4)
Not disclosed. Details are not yet publicly disclosed...
vLLM: undisclosed vulnerability (ZAI-2026-FZU5FA)
Not disclosed. Details are not yet publicly disclosed...
vLLM: undisclosed vulnerability (ZAI-2026-6V5LW9)
Not disclosed. Details are not yet publicly disclosed...
vLLM: undisclosed vulnerability (ZAI-2026-GPUW55)
Not disclosed. Details are not yet publicly disclosed...
vLLM: undisclosed vulnerability (ZAI-2026-P7OU40)
Not disclosed. Details are not yet publicly disclosed...
vLLM: undisclosed vulnerability (ZAI-2026-R44941)
Not disclosed. Details are not yet publicly disclosed...
vLLM: undisclosed vulnerability (ZAI-2026-JX1Z7X)
Not disclosed. Details are not yet publicly disclosed...
vLLM: undisclosed vulnerability (ZAI-2026-6DLX99)
Not disclosed. Details are not yet publicly disclosed...
vLLM: undisclosed vulnerability (ZAI-2026-BF6OAN)
Not disclosed. Details are not yet publicly disclosed...
vLLM: undisclosed vulnerability (ZAI-2026-OOMYE0)
Not disclosed. Details are not yet publicly disclosed...
vLLM: undisclosed vulnerability (ZAI-2026-789K7J)
Not disclosed. Details are not yet publicly disclosed...
vLLM: undisclosed vulnerability (ZAI-2026-0TRNIA)
Not disclosed. Details are not yet publicly disclosed...