vllm vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-24779Highvllm: vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector CVE-2026-22807Highvllm: vLLM affected by RCE via auto_map dynamic module loading during model initialization CVE-2026-22773Mediumvllm: vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions GHSA-MCMC-2M55-J8JJHighvllm: vLLM introduced enhanced protection for CVE-2025-62164 CVE-2025-66448Highvllm: vLLM vulnerable to remote code execution via transformers_utils/get_config CVE-2025-62426Mediumvllm: vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`CVE-2025-62372Highvllm: vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs CVE-2025-62164Highvllm: vLLM deserialization vulnerability leading to DoS and potential RCE CVE-2025-6242Highvllm: vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class CVE-2025-61620Mediumvllm: vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server CVE-2025-59425Highvllm: vLLM is vulnerable to timing attack at bearer auth CVE-2025-9141Highvllm: vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder CVE-2025-48956Highvllm: vllm API endpoints vulnerable to Denial of Service Attacks CVE-2025-48944Mediumvllm: vLLM Tool Schema allows DoS via Malformed pattern and type Fields CVE-2025-48943Mediumvllm: vLLM allows clients to crash the openai server with invalid regex CVE-2025-48942Mediumvllm: vLLM DOS: Remotely kill vllm over http with invalid JSON schema CVE-2025-46722Mediumvllm: vLLM has a Weakness in MultiModalHasher Image Hashing Implementation CVE-2025-46570Lowvllm: Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching GHSA-J828-28RJ-HFHPMediumvllm: vLLM vulnerable to Regular Expression Denial of Service CVE-2025-48887Mediumvllm: vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`CVE-2025-47277Criticalvllm: vLLM Allows Remote Code Execution via PyNcclPipe Communication Service CVE-2025-30165Highvllm: Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration CVE-2025-46560Mediumvllm: vLLM: Quadratic Time Complexity in Input Token Processing leads to denial of service CVE-2025-32444Criticalvllm: vLLM Vulnerable to Remote Code Execution via Mooncake Integration CVE-2025-30202Highvllm: Data exposure via ZeroMQ on multi-node vLLM deployment

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.