Repository navigation
Security: vllm-project/vllm
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Permissive default CORS origins allow cross-origin requests to the vLLM HTTP serverGHSA-vvpg-rrww-wpmh published
Oct 20, 2026 by jperezdealgabaLow -
Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engineGHSA-8397-8qf6-f2gm published
Oct 20, 2026 by jperezdealgabaModerate -
Untrusted EPS inputs can trigger denial of service or Ghostscript RCE in vLLMGHSA-h3rc-j82p-2c3h published
Oct 20, 2026 by jperezdealgabaHigh -
V1 InputBatch.condense leaves a stale allowed_token_ids mask on recycled batch rowsGHSA-6cxc-2vcg-w5qc published
Oct 6, 2026 by jperezdealgabaLow -
Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)GHSA-q97c-p368-75c4 published
Oct 20, 2026 by jperezdealgabaModerate -
Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engineGHSA-p92p-rxj5-7p2x published
Oct 6, 2026 by jperezdealgabaModerate -
An oversized min_tokens in one request hangs the vLLM engine while /health stays greenGHSA-4xqp-c3mv-qff7 published
Oct 6, 2026 by jperezdealgabaModerate -
Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reachGHSA-x6mc-67gf-chw4 published
Sep 23, 2026 by jperezdealgabaModerate -
MOSS-Audio request-controlled processor cache permits remote memory exhaustionGHSA-823j-m4cj-hmjf published
Oct 6, 2026 by jperezdealgabaHigh