Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/09/04 9:37 p.m.•16 views

vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m

Summary The fix for GHSA-rwxx-mrjm-wc2m "ReDoS via structuredoutputs.regex compiled without timeout" wrapped the regex compile in the xgrammar and outlines backends with compileregexwithtimeout and, for outlines, validateregexisbuildable. The lm-format-enforcer backend was left unguarded: it...

5.3CVSS5.8AI score0.00515EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder