Denial Of Service (DoS)

🗓️ 01 Dec 2025 10:47:07Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 17 Views

vllm is vulnerable to DoS via Jinja injection in chat_template and chat_template_kwargs.

Reporter	Title	Published	Views	Family All 20
GithubExploit	Exploit for CVE-2026-5760	2 Apr 202614:24	–	githubexploit
Chainguard	CVE-2025-61620 vulnerabilities	11 Oct 202501:24	–	cgr
CVE	CVE-2025-61620	7 Oct 202521:35	–	cve
Github Security Blog	vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server	7 Oct 202521:35	–	github
OSV	CGA-7MQQ-HV83-C65C	11 Oct 202500:30	–	osv
OSV	CGA-8CX2-2WCC-FQG9	30 Oct 202520:59	–	osv
OSV	CGA-99PW-XMCJ-MWHP	16 Oct 202519:41	–	osv
OSV	CGA-R5V8-H3C6-8XWC	30 Oct 202519:59	–	osv
OSV	CGA-RWF7-GG96-C3GG	30 Oct 202520:00	–	osv
OSV	CGA-WPWR-PQ9F-QX6M	29 Jan 202600:50	–	osv

Vulners

Node

vllm vllmRange0.5.1–0.10.2python

vllm vllmMatch0.10.0python

vllm vllmMatch0.10.1python

vllm vllmMatch0.10.1.1python

vllm vllmMatch0.5.1python

vllm vllmMatch0.5.2python

vllm vllmMatch0.5.3python

vllm vllmMatch0.5.3.post1python

vllm vllmMatch0.5.4python

vllm vllmMatch0.5.5python

vllm vllmMatch0.6.0python

vllm vllmMatch0.6.1python

vllm vllmMatch0.6.1.post1python

vllm vllmMatch0.6.1.post2python

vllm vllmMatch0.6.2python

vllm vllmMatch0.6.3python

vllm vllmMatch0.6.3.post1python

vllm vllmMatch0.6.4python

vllm vllmMatch0.6.4.post1python

vllm vllmMatch0.6.5python

vllm vllmMatch0.6.6python

vllm vllmMatch0.6.6.post1python

vllm vllmMatch0.7.0python

vllm vllmMatch0.7.1python

vllm vllmMatch0.7.2python

vllm vllmMatch0.7.3python

vllm vllmMatch0.8.0python

vllm vllmMatch0.8.1python

vllm vllmMatch0.8.2python

vllm vllmMatch0.8.3python

vllm vllmMatch0.8.4python

vllm vllmMatch0.8.5python

vllm vllmMatch0.8.5.post1python

vllm vllmMatch0.9.0python

vllm vllmMatch0.9.0.1python

vllm vllmMatch0.9.1python

vllm vllmMatch0.9.2python

Source	Link
github	www.github.com/vllm-project/vllm/commit/7977e5027c2250a4abc1f474c5619c40b4e5682f
github	www.github.com/vllm-project/vllm/pull/25794
github	www.github.com/vllm-project/vllm/security/advisories/GHSA-6fvq-23cw-5628
github	www.github.com/vllm-project/vllm

08 Aug 2026 17:36Current

7.3High risk

Vulners AI Score7.3

EPSS0.00207