evoke-vllm (>=0.1.0, <=0.1.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2025-62164 +1 more via vllm (>=0.21.0, <=0.25.1)

vllm PYPI version =0.21.0, =0.1.0, =2.8.0, =2.1.2, =0.1.10, =0.2.2 Source cves: CVE-2025-62164, CVE-2026-73557 Source advisory: OSV:PYSEC-2026-3938...

evoke-vllm (>=0.1.0, <=0.1.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2026-73557 via vllm (>=0.21.0, <=0.25.1)

vllm PYPI version =0.21.0, =0.1.0, =2.8.0, =2.1.2, =0.1.10, =0.2.2 Source cves: CVE-2026-73557 Source advisory: OSV:GHSA-PR7F-P5MW-FC87...

evoke-vllm (>=0.1.0, <=0.1.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2025-62164 +1 more via vllm (>=0.21.0, <=0.25.1)

vllm PYPI version =0.21.0, =0.1.0, =2.8.0, =2.1.2, =0.1.10, =0.2.2 Source cves: CVE-2025-62164, CVE-2026-73557 Source advisory: GHSA-PR7F-P5MW-FC87...

EUVD-2025-146632

Malicious code in uyafru-tuft-darautut npm...