vllm vulnerabilities (PyPI)
113 vulnerabilities.
vllmPyPIvLLM denial of service via prompt embeds on M-RoPE models7.1 HighvllmPyPIvLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends8.7 HighvllmPyPIvLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjection7.5 HighvllmPyPIvLLM speech-to-text endpoints allocate full upload before enforcing the audio file-size limit6.5 MediumvllmPyPIvLLM: Dependency Confusion Vulnerability in vLLM Dockerfile8.8 HighvllmPyPIvLLM: OOM Denial of Service via Audio Decompression Bomb6.5 MediumvllmPyPIvLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router5.3 MediumvllmPyPIvLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflow5.3 MediumvllmPyPIvLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels6.9 MediumvllmPyPIVllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations4.8 MediumvllmPyPIvLLM: OpenAI auth bypass9.1 CriticalvllmPyPIvLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution7.5 HighvllmPyPIUnbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm7.5 HighvllmPyPIvLLM: Artifact Pin Decay in vLLM allows pinned deployments to load unpinned code, weights, and processors6.5 MediumvllmPyPIvllm-project vllm OpenAI-compatible Serving Path denial of service6.9 MediumvllmPyPIvLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters6.5 MediumvllmPyPIvLLM: Remote DoS via Special-Token Placeholders6.5 MediumvllmPyPIvLLM KV Block kv_cache_interface.py has_mamba_layers uninitialized resource6.3 MediumvllmPyPIvLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing6.5 MediumvllmPyPIvLLM affected by Server-Side Request Forgery (SSRF) in `download_bytes_from_url `5.4 MediumvllmPyPIvLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server6.5 MediumvllmPyPIvLLM: Downmix Implementation Differences as Attack Vectors Against Audio AI Models5.9 MediumvllmPyPIvLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out8.8 HighvllmPyPISSRF Protection Bypass in vLLM7.1 HighvllmPyPIvLLM leaks a heap address when PIL throws an error9.8 CriticalvllmPyPIvLLM vulnerable to Server-Side Request Forgery (SSRF) in `MediaConnector`7.1 HighvllmPyPIvLLM affected by RCE via auto_map dynamic module loading during model initialization8.8 HighvllmPyPIvLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions6.5 MediumvllmPyPIvLLM - Denial of Service via Unvalidated Multimodal Embeddings8.7 HighvllmPyPIvLLM vulnerable to remote code execution via transformers_utils/get_config7.1 HighvllmPyPIvLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`6.5 MediumvllmPyPIvLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs8.3 HighvllmPyPIVLLM deserialization vulnerability leading to DoS and potential RCE8.8 HighvllmPyPIvLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server6.5 MediumvllmPyPIVllm: server side request forgery (ssrf) in mediaconnector7.1 HighvllmPyPIvLLM vulnerable to timing attack at bearer auth7.5 HighvllmPyPIvLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder8.8 HighvllmPyPIvLLM API endpoints vulnerable to Denial of Service Attacks7.5 HighvllmPyPIvLLM Tool Schema allows DoS via Malformed pattern and type Fields6.5 MediumvllmPyPIvLLM allows clients to crash the openai server with invalid regex6.5 MediumvllmPyPIvLLM DOS: Remotely kill vllm over http with invalid JSON schema6.5 MediumvllmPyPIvLLM has a Weakness in MultiModalHasher Image Hashing Implementation4.2 MediumvllmPyPIvLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel2.6 LowvllmPyPIvllm - Regular Expression Denial of Service in Multiple Components5.3 MediumvllmPyPIvLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`6.5 MediumvllmPyPIvLLM Allows Remote Code Execution via PyNcclPipe Communication Service9.8 CriticalvllmPyPIRemote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration8.0 HighvllmPyPIvLLM phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service6.5 MediumvllmPyPIvLLM Vulnerable to Remote Code Execution via Mooncake Integration10.0 CriticalvllmPyPIData exposure via ZeroMQ on multi-node vLLM deployment7.5 High- Show moreLoading…