vllm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-105753Mediumvllm: vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver…CVE-2026-105752Lowvllm: vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle CVE-2026-105758Mediumvllm: vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach CVE-2026-105760Mediumvllm: vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion CVE-2026-105754Mediumvllm: vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features CVE-2026-105757Mediumvllm: vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3…CVE-2026-105755Mediumvllm: vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and…CVE-2026-105756Mediumvllm: vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError`…CVE-2026-69147Mediumvllm: vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation CVE-2026-57173Mediumvllm: vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions CVE-2026-73560Mediumvllm: vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections CVE-2026-73558Mediumvllm: vLLM: Cross-User Data Leak Vulnerability CVE-2026-73557Mediumvllm: vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts CVE-2026-73556Mediumvllm: vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m CVE-2026-73555Mediumvllm: vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages CVE-2026-71486Mediumvllm: vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds CVE-2026-73559Mediumvllm: vLLM: Completion prompt lists fan out into unbounded engine requests CVE-2026-55514Highvllm: vLLM denial of service via prompt embeds on M-RoPE models CVE-2026-55646Mediumvllm: vLLM: Speech-to-text upload size limit is enforced after full UploadFile read CVE-2026-55574Highvllm: vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends CVE-2026-54234Highvllm: vLLM has Remote DoS via Invalid Recovered Token Reinjection CVE-2026-34760Mediumvllm: vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models CVE-2026-54233Mediumvllm: vLLM: OOM Denial of Service via Audio Decompression Bomb CVE-2026-54236Mediumvllm: vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router CVE-2026-53923Mediumvllm: vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.