Denial Of Service (DoS)

vllm is vulnerable to a Denial of service DoS. The vulnerability is due to improper handling of invalid jsonschema in the /v1/completions API’s Guided Param, which allows an attacker to cause a denial of service by crashing the server...

CVE-2025-48942

vLLM is an inference/serving engine for LLMs. CVE-2025-48942 affects versions 0.8.0 up to but excluding 0.9.0; hitting /v1/completions with an invalid json_schema as a Guided Param kills the vLLM server (availability impact). The issue is noted as analogous to CVE-2025-48943 but for a regex inste...

CVE-2025-48942: Uncaught Exception

vLLM is an inference and serving engine for large language models LLMs. In versions 0.8.0 up to but excluding 0.9.0, hitting the /v1/completions API with a invalid jsonschema as a Guided Param kills the vllm server. This vulnerability is similar GHSA-9hcf-v7m4-6m2j/CVE-2025-48943, but for regex...