1214 matches found
CVE-2026-93592: Improper Validation of Array Index
vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (CUDA)
Red Hat AI Base Images 3.3.3 CUDA is now available. Red Hat® AI Base Images...
Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.3.7 (CUDA)
Red Hat AI Inference Server 3.3.7 CUDA is now available. Red Hat® AI Inference Server...
Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.7 (CUDA)
Red Hat AI Inference Server Model Optimization Tools 3.3.7 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...
Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (CUDA 13.0)
Red Hat AI Base Images 3.3.3 CUDA 13.0 is now available. Red Hat® AI Base Images...
Allocation of Resources Without Limits or Throttling
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via VideoMediaIO.mergekwargs in vllm/multimodal/media/video.py, where a request-level...
ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index
Overview An out-of-bounds OOB memory access vulnerability involving unchecked array indexing has been identified in the exllamav3ext compute unified device architecture CUDA extension. Successful exploitation can lead to an immediate denial of service or application instability. This vulnerabilit...
GHSA-4J2P-28Q2-5M79 vulnerabilities
Vulnerabilities for packages: py3-accelerate-cuda-12.9, nemo, vllm-openai-cuda-12.9, py3-accelerate-cuda-13.0, vllm-openai-cuda-13.0...
CVE-2026-69112 vulnerabilities
Vulnerabilities for packages: py3-accelerate-cuda-12.9, nemo, vllm-openai-cuda-12.9, py3-accelerate-cuda-13.0, vllm-openai-cuda-13.0...
GHSA-83VM-P52W-F9PW vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9...
CVE-2026-44223 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9...
Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
Red Hat AI Inference Server Model Optimization Tools 3.2.2 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...
Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)
Red Hat AI Inference Server 3.2.2 CUDA is now available. Red Hat® AI Inference Server...
GHSA-87X5-VMC3-756J vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...
CVE-2026-73559 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...
Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.6 (CUDA)
Red Hat AI Inference Server Model Optimization Tools 3.3.6 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...
GHSA-Q8GQ-377P-JQ3R vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...
CVE-2026-54234 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...