CVE-2025-9141

A vulnerability was found in vLLM's Qwen3 Coder tool parser. Since this parser uses Python's eval function, it poses a risk of arbitrary code execution. This vulnerability appears during the parameter conversion process when the parser attempts to handle complex data types...

CVE-2024-47081 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, nvidia-nsight-compute-13.2, spamcheck, jupyter-docker-stacks, az, nvidia-nsight-compute-13.3, jupyter-base-notebook, ggshield, kserve-huggingfaceserver-cuda-13.3, py3-requests, nemo, text-generation-inference, barman, graalvm, pypy-3.11,...

GHSA-9PCC-GVX5-R5WM vulnerabilities

Vulnerabilities for packages: py3.10-vllm-cuda-12.6...

CVE-2025-30165 vulnerabilities

Vulnerabilities for packages: py3.10-vllm-cuda-12.6...

GHSA-9HJG-9R4M-MVJ7 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, nvidia-nsight-compute-13.2, spamcheck, jupyter-docker-stacks, az, nvidia-nsight-compute-13.3, jupyter-base-notebook, ggshield, kserve-huggingfaceserver-cuda-13.3, py3-requests, nemo, text-generation-inference, barman, graalvm, pypy-3.11,...

CVE-2025-48943 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm, py3.10-vllm-cuda-11.8...

CVE-2025-48942 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm, py3.10-vllm-cuda-11.8...

CVE-2025-48944 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm, py3.10-vllm-cuda-11.8...

CVE-2024-8768 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

CVE-2024-9053 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

GHSA-CJ47-QJ6G-X7R4 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

GHSA-GGPF-24JW-3FCW vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

CVE-2024-8939 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

Denial Of Service (DoS)

vllm is vulnerable to Denial of Service ReDoS. The vulnerability is due to improper handling of invalid regular expressions in structured output, which allows an attacker to crash the server by submitting a crafted regex...

Denial Of Service (DoS)

vllm is vulnerable to a Denial of service DoS. The vulnerability is due to improper handling of invalid jsonschema in the /v1/completions API’s Guided Param, which allows an attacker to cause a denial of service by crashing the server...

Timing Side-channel Attacks

vllm is vulnerable to Timing side-channel attacks. The vulnerability is due to timing discrepancies during the prefill phase by the PageAttention mechanism reusing matching prefix chunks, which speeds up token generation and allows an attacker to infer prompt similarity or presence...

CVE-2025-48942

vLLM is an inference and serving engine for large language models LLMs. In versions 0.8.0 up to but excluding 0.9.0, hitting the /v1/completions API with a invalid jsonschema as a Guided Param kills the vllm server. This vulnerability is similar GHSA-9hcf-v7m4-6m2j/CVE-2025-48943, but for regex...

CVE-2025-48944

vLLM is an inference and serving engine for large language models LLMs. In version 0.8.0 up to but excluding 0.9.0, the vLLM backend used with the /v1/chat/completions OpenAPI endpoint fails to validate unexpected or malformed input in the "pattern" and "type" fields when the tools functionality ...

CVE-2025-48943

vLLM is an inference and serving engine for large language models LLMs. Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service ReDoS that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to...

PYSEC-2025-55

vLLM is an inference and serving engine for large language models LLMs. Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service ReDoS that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to...