aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +209 more potentially affected by CVE-2026-54235 via vllm (>=0.1.3, <=0.28.0)

vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =0.2.0, =0.3.0 and more Source cves: CVE-2026-54235 Source advisory: SNYK:PYTHON-VLLM-17372795...

CVE-2026-12491 Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations

A flaw was found in vLLM, an open-source library for large language model inference. This vulnerability arises from improper handling of image metadata, specifically EXIF orientation and PNG transparency tRNS data, during image processing. When images are converted to RGB, transparency informatio...

CVE-2026-53540 vulnerabilities

Vulnerabilities for packages: airflow, airflow-postgres-fips, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-core, litellm, wazuh-manager-fips...

GHSA-V9PG-7XVM-68HF vulnerabilities

Vulnerabilities for packages: airflow, airflow-postgres-fips, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-core, litellm, wazuh-manager-fips...

CVE-2026-53537 vulnerabilities

Vulnerabilities for packages: airflow, airflow-postgres-fips, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-core, litellm, wazuh-manager-fips...

CVE-2026-53539 vulnerabilities

Vulnerabilities for packages: airflow, airflow-postgres-fips, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-core, litellm, wazuh-manager-fips...

GHSA-6JV3-5F52-599M vulnerabilities

Vulnerabilities for packages: airflow, airflow-postgres-fips, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-core, litellm, wazuh-manager-fips...

GHSA-VFFW-93WF-4J4Q vulnerabilities

Vulnerabilities for packages: airflow, airflow-postgres-fips, wazuh-manager, tritonserver-backend-vllm-cuda-12.9, airflow-core, litellm, wazuh-manager-fips...

PT-2026-50278

Name of the Vulnerable Software and Affected Versions vLLM affected versions not specified Description An issue exists in the image processing logic where image metadata is improperly handled. Specifically, the software fails to call ImageOps.exif transpose to normalize EXIF orientation, causing...

PT-2026-50491

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.23.1rc0 Description An incomplete fix for a previous memory leak issue allows unauthenticated attackers to leak heap memory addresses. The system fails to properly sanitize error messages in several response paths,...

CVE-2026-54283 vulnerabilities

Vulnerabilities for packages: airflow, prefect-fips, kserve, nemo, airflow-postgres-fips, tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, airflow-core, litellm, prefect, mlflow-fips, mlflow, semgrep...

GHSA-82W8-QH3P-5JFQ vulnerabilities

Vulnerabilities for packages: airflow, prefect-fips, kserve, nemo, airflow-postgres-fips, tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, airflow-core, litellm, prefect, mlflow-fips, mlflow, semgrep...

GHSA-JP82-JPQV-5VV3 vulnerabilities

Vulnerabilities for packages: airflow, prefect-fips, kserve, nemo, airflow-postgres-fips, tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, airflow-core, litellm, prefect, mlflow-fips, mlflow, semgrep...

CVE-2026-54282 vulnerabilities

Vulnerabilities for packages: airflow, prefect-fips, kserve, nemo, airflow-postgres-fips, tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, airflow-core, litellm, prefect, mlflow-fips, mlflow, semgrep...

CVE-2026-54275 vulnerabilities

Vulnerabilities for packages: py3-vllm-cuda-13.0, apache-beam-python-3.12-sdk, py3.13-scanner-test-libraries-aiohttp, tritonserver-backend-vllm-cuda-12.9, text-generation-inference, open-webui, metaflow-service-fips, awx, airflow, apache-beam-python-3.11-sdk, authentik, dask-kubernetes-fips,...

GHSA-HPJ7-WQ8M-9HGP vulnerabilities

Vulnerabilities for packages: py3-vllm-cuda-13.0, apache-beam-python-3.12-sdk, py3.13-scanner-test-libraries-aiohttp, tritonserver-backend-vllm-cuda-12.9, text-generation-inference, open-webui, metaflow-service-fips, awx, airflow, apache-beam-python-3.11-sdk, authentik, dask-kubernetes-fips,...

GHSA-63HW-FMQ6-XXG2 vulnerabilities

Vulnerabilities for packages: py3-vllm-cuda-13.0, apache-beam-python-3.12-sdk, py3.13-scanner-test-libraries-aiohttp, tritonserver-backend-vllm-cuda-12.9, text-generation-inference, open-webui, metaflow-service-fips, awx, airflow, apache-beam-python-3.11-sdk, authentik, dask-kubernetes-fips,...

GHSA-4FVR-RGM6-GQMC vulnerabilities

Vulnerabilities for packages: py3-vllm-cuda-13.0, apache-beam-python-3.12-sdk, py3.13-scanner-test-libraries-aiohttp, tritonserver-backend-vllm-cuda-12.9, text-generation-inference, open-webui, metaflow-service-fips, awx, airflow, apache-beam-python-3.11-sdk, authentik, dask-kubernetes-fips,...

CVE-2026-54274 vulnerabilities

Vulnerabilities for packages: py3-vllm-cuda-13.0, apache-beam-python-3.12-sdk, py3.13-scanner-test-libraries-aiohttp, tritonserver-backend-vllm-cuda-12.9, text-generation-inference, open-webui, metaflow-service-fips, awx, airflow, apache-beam-python-3.11-sdk, authentik, dask-kubernetes-fips,...

CVE-2026-54280 vulnerabilities

Vulnerabilities for packages: py3-vllm-cuda-13.0, apache-beam-python-3.12-sdk, py3.13-scanner-test-libraries-aiohttp, tritonserver-backend-vllm-cuda-12.9, text-generation-inference, open-webui, metaflow-service-fips, awx, airflow, apache-beam-python-3.11-sdk, authentik, dask-kubernetes-fips,...