9 matches found
CVE-2026-103241
A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has bee...
EUVD-2026-90191
A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has bee...
CVE-2026-103241 vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service
A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has bee...
CVE-2026-103241
A flaw in vllm-project vLLM (versions up to 0.26.0 ) affects the Gemma4UnifiedParser component, specifically within the file rust/src/parser/src/unified/gemma4.rs. A remote attacker can execute a manipulation resulting in a denial of service (DoS). Public exploits for this vulnerability have been...
CVE-2024-11040
CVE-2024-11040 vllm-project vllm version 0.5.2.2 is vulnerable to Denial of Service attacks...
CVE-2026-90878 vllm-project vLLM Jinja Template Rendering completions resource consumption
A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chattemplate causes resource consumption. The attack can be initiated remotely. The exploit...
CVE-2024-9053 Remote Code Execution in vllm-project/vllm
vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer RPC server entrypoints. The core functionality runserverloop calls the function makehandlercoro, which directly uses cloudpickle.loads on received messages without any sanitization. This can result in remote code...