EUVD-2025-16191

Malicious code in bioql PyPI...

CVE-2025-48887 vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`

vLLM, an inference and serving engine for large language models LLMs, has a Regular Expression Denial of Service ReDoS vulnerability in the file vllm/entrypoints/openai/toolparsers/pythonictoolparser.py of versions 0.6.4 up to but excluding 0.9.0. The root cause is the use of a highly complex and...

CVE-2025-48887

CVE-2025-48887 affects vLLM command/tool parsing: the ReDoS vulnerability is in vllm/entrypoints/openai/tool_parsers/pythonic_tool_parser.py for versions 0.6.4 through 0.9.0 (exclusive) . The root cause is a highly complex, nested regex used for tool call detection, enabling catastrophic backtrac...