The vulnerability of the pythonic_tool_parser.py script from the library for working with large language models (LLMs), vLLM, allows a perpetrator to trigger a service failure.

The vulnerability of the pythonictoolparser.py script, a library for working with large language models LLMs, is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Regular Expression Denial of Service (ReDoS)

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS through the pythonictoolparser.py. An attacker can cause severe performance degradation or make the servi...