aios-core (>=0.0.1b1, <=0.0.1b2), flute-kernel (>=0.2.6, <=0.4.1) +1 more potentially affected by CVE-2025-48887 via vllm (0.5.4)

vllm PYPI version 0.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - aios-core =0.0.1b1, =0.2.6, =0.5.4.0, =0.5.4.1 Source cves: CVE-2025-48887 Source advisory: OSV:PYSEC-2025-50...

aios-core (>=0.0.1b1, <=0.0.1b2), flute-kernel (>=0.2.6, <=0.4.1) +1 more potentially affected by CVE-2025-32444 via vllm (0.5.4)

vllm PYPI version 0.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - aios-core =0.0.1b1, =0.2.6, =0.5.4.0, =0.5.4.1 Source cves: CVE-2025-32444 Source advisory: OSV:PYSEC-2025-42...