PT-2026-80324

vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory OOM Denial of Service DoS attack due to unbounded frame count processing in the VideoMediaIO.load base64 method. When processing video/jpeg data URLs, the method splits the base64 data string on commas to extract individual JPEG...