Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2026/10/23 8:43 p.m.•1 views

vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine

Summary Multimodal content parts imageurl, videourl, inputaudio, ... accept a user-supplied uuid field that vLLM uses verbatim as the item's cache identity mmhash. The two frontend/engine processor caches P0 "sender" cache in the API process, P1 "receiver" cache in the EngineCore process are...

7.5CVSS5.8AI score0.0017EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder