CVE-2026-105760

A flaw was found in vLLM. A remote attacker can trigger a Denial of Service DoS by submitting a request with excessively large frame rate and frame count options for the GLMGA video backend. Because the application constructs intermediate frame index lists without proper upper bounds, processing...

CVE-2026-105760

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level mediaiokwargs field to select the GLMGA video backend and supply large values for the fps and maxframes options without a strict work ceiling. GLMGA constructs and deduplicates a...

CVE-2026-105760: Uncontrolled Resource Consumption

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level mediaiokwargs field to select the GLMGA video backend and supply large values for the fps and maxframes options without a strict work ceiling. GLMGA constructs and deduplicates a...

PT-2026-106272

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.30.0 Description A partial denial of service issue exists in the OpenAI-compatible chat endpoint. A remote caller can provide large values for the fps and max frames variables within the media io kwargs field while...

PT-2026-105921

Summary Current vLLM main lets an inference request choose the PyNvVideoCodec GPU video decoder through media io kwargs.video.video backend, but engine GPU memory reservation is computed only from static startup configuration and VLLM VIDEO LOADER BACKEND. If the server starts with the default...

Joyplus CMS suffers from SQL Injection Vulnerability

Joyplus CMS Joy Video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . Joyplus CMS has a SQL injection vulnerability ,...

Joyplus CMS suffers from an arbitrary file deletion vulnerability (CNVD-2020-21947)

Joyplus CMS Joy Video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . Joyplus CMS has an arbitrary file deletion...

joyplus-cms cross-site scripting vulnerability (CNVD-2018-14238)

joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A cross-site scripting vulnerability exists in...