747 matches found
Improper Handling of Highly Compressed Data (Data Amplification)
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through the audio.py file. An attacker can cause excessive memory consumption by...
GHSA-6PR9-RP53-2PMC vLLM: OOM Denial of Service via Audio Decompression Bomb
Summary vLLM's /v1/audio/transcriptions endpoint limits compressed upload size but not decoded PCM output. A 25MB OPUS file expands to 14.9GB of float32 PCM at decode time. Tested on vLLM v0.19.0. Details SpeechToTextProcessor rejects uploads over VLLMMAXAUDIOCLIPFILESIZEMB default 25MB based on...
GHSA-HGG8-FQQC-VFMW vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router
vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via the Anthropic API router Researcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security Research Severity: CVSS 3.1 5.3 Medium AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Target: https://github.com/vllm-project/vllm ---...
Incorrect Conversion between Numeric Types
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Incorrect Conversion between Numeric Types in the ggmldequantize, ggmlmulmatveca8, ggmlmulmata8, and ggmlmoea8 functions when tensor dimensions are...
Interpretation Conflict
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Interpretation Conflict in the image processing pipeline. An attacker can cause the model to interpret images differently from human expectations by...
vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels
Summary All temperature validation gates use comparison operators , which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagate to GPU sampling kernels, where they produce undefined behavior or CUDA errors tha...
Improper Validation of Specified Type of Input
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input due to improper validation of the temperature parameter while sampling. An attacker can cause the...
CVE-2026-12491 Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations
A flaw was found in vLLM, an open-source library for large language model inference. This vulnerability arises from improper handling of image metadata, specifically EXIF orientation and PNG transparency tRNS data, during image processing. When images are converted to RGB, transparency informatio...
CVE-2026-53540 vulnerabilities
Vulnerabilities for packages: airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, wazuh-manager-fips, wazuh-manager, airflow, litellm...
GHSA-V9PG-7XVM-68HF vulnerabilities
Vulnerabilities for packages: airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, wazuh-manager-fips, wazuh-manager, airflow, litellm...
CVE-2026-53537 vulnerabilities
Vulnerabilities for packages: airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, wazuh-manager-fips, wazuh-manager, airflow, litellm...
CVE-2026-53539 vulnerabilities
Vulnerabilities for packages: airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, wazuh-manager-fips, wazuh-manager, airflow, litellm...
GHSA-6JV3-5F52-599M vulnerabilities
Vulnerabilities for packages: airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, wazuh-manager-fips, wazuh-manager, airflow, litellm...
GHSA-VFFW-93WF-4J4Q vulnerabilities
Vulnerabilities for packages: airflow-core, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, wazuh-manager-fips, wazuh-manager, airflow, litellm...
PT-2026-50278
Name of the Vulnerable Software and Affected Versions vLLM affected versions not specified Description An issue exists in the image processing logic where image metadata is improperly handled. Specifically, the software fails to call ImageOps.exif transpose to normalize EXIF orientation, causing...
PT-2026-50491
Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.23.1rc0 Description An incomplete fix for a previous memory leak issue allows unauthenticated attackers to leak heap memory addresses. The system fails to properly sanitize error messages in several response paths,...
CVE-2026-54283 vulnerabilities
Vulnerabilities for packages: airflow-core, mlflow-fips, nemo, kserve, airflow-postgres-fips, prefect, tritonserver-backend-vllm-cuda-12.9, mlflow, prefect-fips, semgrep, airflow, tritonserver-backend-vllm-cuda-13.0, litellm...
GHSA-JP82-JPQV-5VV3 vulnerabilities
Vulnerabilities for packages: airflow-core, mlflow-fips, nemo, kserve, airflow-postgres-fips, prefect, tritonserver-backend-vllm-cuda-12.9, mlflow, prefect-fips, semgrep, airflow, tritonserver-backend-vllm-cuda-13.0, litellm...
GHSA-82W8-QH3P-5JFQ vulnerabilities
Vulnerabilities for packages: airflow-core, mlflow-fips, nemo, kserve, airflow-postgres-fips, prefect, tritonserver-backend-vllm-cuda-12.9, mlflow, prefect-fips, semgrep, airflow, tritonserver-backend-vllm-cuda-13.0, litellm...
CVE-2026-54282 vulnerabilities
Vulnerabilities for packages: airflow-core, mlflow-fips, nemo, kserve, airflow-postgres-fips, prefect, tritonserver-backend-vllm-cuda-12.9, mlflow, prefect-fips, semgrep, airflow, tritonserver-backend-vllm-cuda-13.0, litellm...