CVE-2024-11040

CVE-2024-11040 vllm-project vllm versione 0.5.2.2 è vulnerabile ad attacchi Denial of Service...

CVE-2024-11040

...

CVE-2024-11040

...

CVE-2024-9053 Remote Code Execution in vllm-project/vllm

vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer RPC server entrypoints. The core functionality runserverloop calls the function makehandlercoro, which directly uses cloudpickle.loads on received messages without any sanitization. This can result in remote code...