16 matches found
GHSA-4J2P-28Q2-5M79 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, py3-accelerate-cuda-13.0, vllm-openai-cuda-13.0, nemo, py3-accelerate-cuda-12.9...
CVE-2026-69112 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, py3-accelerate-cuda-13.0, vllm-openai-cuda-13.0, nemo, py3-accelerate-cuda-12.9...
GHSA-83VM-P52W-F9PW vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9...
CVE-2026-44223 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9...
CVE-2026-1839 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, nemo, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, py3-transformers, text-generation-inference...
CVE-2026-34753 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...
GHSA-3MWP-WVH9-7528 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...
GHSA-PQ5C-RJHQ-QP7P vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...
GHSA-PF3H-QJGV-VCPR vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...
CVE-2026-34756 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...
CVE-2026-34755 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, dask-kubernetes, tritonserver-backend-vllm-cuda-13.0, request-1276, metaflow-service, kubeflow-jupyter-web-app, superset, datadog-agent-fips, dbt-snowflake, wazuh-manager, datadog-agent, open-webui, opal, authentik, dagster, label-studio, mycli...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, dask-kubernetes, tritonserver-backend-vllm-cuda-13.0, request-1276, metaflow-service, kubeflow-jupyter-web-app, superset, datadog-agent-fips, dbt-snowflake, wazuh-manager, datadog-agent, open-webui, opal, authentik, dagster, label-studio, mycli...
CVE-2026-34756 vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server
vLLM is an inference and serving engine for large language models LLMs. From 0.1.0 to before 0.19.0, a Denial of Service vulnerability exists in the vLLM OpenAI-compatible API server. Due to the lack of an upper bound validation on the n parameter in the ChatCompletionRequest and CompletionReques...