[{"data":1,"prerenderedAt":1387},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-vllm-571f04fc":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":244,"related":265},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T15:03:09.339Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T15:01:18.334Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":84,"category":85,"aiRelevant":86,"provider":87,"repositoryCount":88,"occurrenceCount":88,"directRepositoryCount":38,"versionCount":88,"licenseExpressions":89,"advisoryIds":91,"advisoryCount":131,"verifiedAttestation":46,"repositories":132,"versions":154},"package:pypi:vllm","vllm-571f04fc","pypi:vllm","pypi","vllm","vLLM","model-runtime",true,null,3,[90],"Apache-2.0",[92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130],"GHSA-2pc9-4j83-qjmr","GHSA-3f6c-7fw2-ppm4","GHSA-3mwp-wvh9-7528","GHSA-3ww4-5jv9-j5gm","GHSA-4qjh-9fv9-r85r","GHSA-4r2x-xpjr-7cvv","GHSA-5jv2-g5wq-cmr4","GHSA-69j4-grxj-j64p","GHSA-6c4r-fmh3-7rh8","GHSA-6fvq-23cw-5628","GHSA-6pr9-rp53-2pmc","GHSA-6qc9-v4r8-22xg","GHSA-7972-pg2x-xr59","GHSA-7h4p-rffg-7823","GHSA-8fr4-5q9j-m8gm","GHSA-8jr5-v98p-w75m","GHSA-94f4-hr76-p5j6","GHSA-98f3-hwg4-4rf7","GHSA-9hcf-v7m4-6m2j","GHSA-9pcc-gvx5-r5wm","GHSA-c65p-x677-fgj6","GHSA-grg2-63fw-f2qr","GHSA-hgg8-fqqc-vfmw","GHSA-hpv8-x276-m59f","GHSA-j828-28rj-hfhp","GHSA-mcmc-2m55-j8jj","GHSA-mrw7-hf4f-83pf","GHSA-pmqf-x6x8-p7qw","GHSA-pq5c-rjhq-qp7p","GHSA-q8gq-377p-jq3r","GHSA-qh4c-xf7m-gxfc","GHSA-rwxx-mrjm-wc2m","GHSA-rxc4-3w6r-4v47","GHSA-vrq3-r879-7m65","GHSA-w6q7-j642-7c25","GHSA-wr9h-g72x-mwhm","GHSA-x368-4g9h-fvv4","PYSEC-2026-227","PYSEC-2026-2302",39,[133,140,147],{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":138,"evidenceCount":32},"opencode:7674","opencode-7674","Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation",[139],"0.11.0",{"id":141,"slug":142,"name":143,"pathWithNamespace":144,"versions":145,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[146],"0.10.1.1",{"id":148,"slug":149,"name":150,"pathWithNamespace":151,"versions":152,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[153],"0.8.5.post1",[155,210,227],{"version":153,"repositoryCount":32,"occurrenceCount":32,"ageDays":156,"advisoryIds":157,"metadata":158},443,[93,94,95,96,97,98,99,100,101,102,103,105,106,108,109,110,111,112,113,114,115,116,119,120,121,122,123,124,125,126,127,128,129,130],{"state":159,"checkedAt":160,"publishedAt":161,"deprecated":46,"deprecatedReason":87,"licenses":162,"advisoryIds":163,"links":195,"relatedProjects":204,"attestations":208,"verifiedAttestation":46,"projectStatus":209},"resolved","2026-07-20T03:19:50.101Z","2025-05-02T22:31:02Z",[90],[93,94,95,96,97,98,99,100,101,102,103,105,106,108,109,110,111,112,113,114,115,116,119,120,121,122,123,124,125,126,127,128,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,129,182,183,184,185,130,186,187,188,189,190,191,192,193,194],"PYSEC-2025-43","PYSEC-2025-50","PYSEC-2025-53","PYSEC-2025-54","PYSEC-2025-55","PYSEC-2026-143","PYSEC-2026-144","PYSEC-2026-2011","PYSEC-2026-2012","PYSEC-2026-2013","PYSEC-2026-2015","PYSEC-2026-2017","PYSEC-2026-2019","PYSEC-2026-2020","PYSEC-2026-2021","PYSEC-2026-2023","PYSEC-2026-2026","PYSEC-2026-226","PYSEC-2026-2298","PYSEC-2026-2299","PYSEC-2026-2300","PYSEC-2026-2301","PYSEC-2026-2304","PYSEC-2026-2306","PYSEC-2026-3403","PYSEC-2026-3404","PYSEC-2026-3405","PYSEC-2026-3407","PYSEC-2026-3408","PYSEC-2026-3409","PYSEC-2026-565",[196,199,201],{"label":197,"url":198},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm",{"label":200,"url":198},"HOMEPAGE",{"label":202,"url":203},"DOCUMENTATION","https:\u002F\u002Fvllm.readthedocs.io\u002Fen\u002Flatest\u002F",[205],{"id":206,"relationType":197,"relationProvenance":207},"github.com\u002Fvllm-project\u002Fvllm","UNVERIFIED_METADATA",[],"active",{"version":146,"repositoryCount":32,"occurrenceCount":32,"ageDays":211,"advisoryIds":212,"metadata":213},333,[92,93,94,95,97,98,99,100,101,102,104,105,106,108,109,113,114,115,119,120,121,122,123,127,128,129,130],{"state":159,"checkedAt":160,"publishedAt":214,"deprecated":46,"deprecatedReason":87,"licenses":215,"advisoryIds":216,"links":219,"relatedProjects":224,"attestations":226,"verifiedAttestation":46,"projectStatus":209},"2025-08-20T23:17:09Z",[90],[92,93,94,95,97,98,99,100,101,102,104,105,106,108,109,113,114,115,119,120,121,122,123,127,128,169,170,217,171,172,173,174,176,177,180,181,129,218,182,183,184,185,130,186,187,188,189,190,191,192,193,194],"PYSEC-2026-2010","PYSEC-2026-2297",[220,221,222],{"label":197,"url":198},{"label":200,"url":198},{"label":202,"url":223},"https:\u002F\u002Fdocs.vllm.ai\u002Fen\u002Flatest\u002F",[225],{"id":206,"relationType":197,"relationProvenance":207},[],{"version":139,"repositoryCount":32,"occurrenceCount":32,"ageDays":228,"advisoryIds":229,"metadata":230},289,[92,94,95,97,98,99,100,102,104,105,106,107,108,109,113,114,115,117,118,119,120,121,122,123,128,129,130],{"state":159,"checkedAt":160,"publishedAt":231,"deprecated":46,"deprecatedReason":87,"licenses":232,"advisoryIds":233,"links":237,"relatedProjects":241,"attestations":243,"verifiedAttestation":46,"projectStatus":209},"2025-10-04T01:39:32Z",[90],[92,94,95,97,98,99,100,102,104,105,106,107,108,109,113,114,115,117,118,119,120,121,122,123,128,169,170,217,172,174,234,176,177,181,129,218,182,183,184,185,130,186,187,235,188,189,190,236,191,192,193,194],"PYSEC-2026-2018","PYSEC-2026-250","PYSEC-2026-3406",[238,239,240],{"label":197,"url":198},{"label":200,"url":198},{"label":202,"url":223},[242],{"id":206,"relationType":197,"relationProvenance":207},[],{"occurrences":245,"occurrenceCount":88},[246,253,259],{"id":247,"repositoryId":134,"repositorySlug":135,"repositoryName":136,"repositoryPathWithNamespace":137,"ecosystem":82,"name":83,"identity":81,"version":139,"versionKey":248,"direct":87,"development":87,"sourceKind":249,"filePath":55,"blobSha":250,"sourceUrl":251,"commitSha":252},"component:6ba2ebd7c7693588ea5eb986","pypi:vllm@0.11.0","uv-lock","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32",{"id":254,"repositoryId":141,"repositorySlug":142,"repositoryName":143,"repositoryPathWithNamespace":144,"ecosystem":82,"name":83,"identity":81,"version":146,"versionKey":255,"direct":87,"development":87,"sourceKind":249,"filePath":55,"blobSha":256,"sourceUrl":257,"commitSha":258},"component:5f3e8a1c09e465d3492436ec","pypi:vllm@0.10.1.1","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":260,"repositoryId":148,"repositorySlug":149,"repositoryName":150,"repositoryPathWithNamespace":151,"ecosystem":82,"name":83,"identity":81,"version":153,"versionKey":261,"direct":87,"development":87,"sourceKind":249,"filePath":55,"blobSha":262,"sourceUrl":263,"commitSha":264},"component:27f212d44914467d2a5b2c19","pypi:vllm@0.8.5.post1","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"repositories":266,"vulnerabilities":273},[267,269,271],{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":268,"evidenceCount":32},[139],{"id":141,"slug":142,"name":143,"pathWithNamespace":144,"versions":270,"evidenceCount":32},[146],{"id":148,"slug":149,"name":150,"pathWithNamespace":151,"versions":272,"evidenceCount":32},[153],[274,323,350,386,412,436,476,506,536,564,588,616,642,691,720,747,778,814,847,870,897,921,946,973,997,1017,1038,1064,1092,1123,1155,1193,1218,1244,1267,1290,1318,1353,1367],{"id":92,"slug":275,"dossier":46,"summary":276,"aliases":277,"sourceIds":279,"published":280,"modified":281,"checkedAt":7,"severity":282,"references":286,"versionKeys":321,"packageCount":32,"repositoryCount":322},"ghsa-2pc9-4j83-qjmr-6e2eb21d","vLLM affected by RCE via auto_map dynamic module loading during model initialization",[278,217],"CVE-2026-22807",[92,217],"2026-01-21T16:12:54Z","2026-07-17T16:30:29.025047931Z",[283],{"type":284,"score":285},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[287,290,293,295,297,299,302,304,305,307,309,311,313,315,317,319],{"type":288,"url":289},"WEB","https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":291,"url":292},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22807",{"type":288,"url":294},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32194",{"type":288,"url":296},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",{"type":288,"url":298},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22807.json",{"type":300,"url":301},"PACKAGE","https:\u002F\u002Fpypi.org\u002Fproject\u002Fvllm",{"type":288,"url":303},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.0",{"type":300,"url":198},{"type":288,"url":306},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2010.yaml",{"type":291,"url":308},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":288,"url":310},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2431865",{"type":288,"url":312},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22807",{"type":288,"url":314},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5119",{"type":288,"url":316},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3782",{"type":288,"url":318},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3713",{"type":288,"url":320},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",[255,248],2,{"id":93,"slug":324,"dossier":46,"summary":325,"aliases":326,"sourceIds":328,"published":329,"modified":330,"checkedAt":7,"severity":331,"references":334,"versionKeys":349,"packageCount":32,"repositoryCount":322},"ghsa-3f6c-7fw2-ppm4-735443b9","vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class",[327,171],"CVE-2025-6242",[93,171],"2025-10-07T22:14:15Z","2026-07-07T17:57:19.957237175Z",[332],{"type":284,"score":333},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:H",[335,337,339,341,343,345,346,347],{"type":288,"url":336},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",{"type":291,"url":338},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6242",{"type":288,"url":340},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F9d9a2b77f19f68262d5e469c4e82c0f6365ad72d",{"type":288,"url":342},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-6242",{"type":288,"url":344},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2373716",{"type":300,"url":198},{"type":300,"url":301},{"type":291,"url":348},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",[255,261],{"id":94,"slug":351,"dossier":46,"summary":352,"aliases":353,"sourceIds":355,"published":356,"modified":357,"checkedAt":7,"severity":358,"references":361,"versionKeys":385,"packageCount":32,"repositoryCount":88},"ghsa-3mwp-wvh9-7528-9c78ec85","vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server",[354,182],"CVE-2026-34756",[94,182],"2026-04-03T15:35:48Z","2026-07-17T16:30:29.032335074Z",[359],{"type":284,"score":360},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[362,365,367,369,371,373,375,377,380,382,383],{"type":363,"url":364},"FIX","https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3mwp-wvh9-7528",{"type":291,"url":366},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34756",{"type":363,"url":368},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37952",{"type":363,"url":370},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb111f8a61f100fdca08706f41f29ef3548de7380",{"type":291,"url":372},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36005",{"type":291,"url":374},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36006",{"type":288,"url":376},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34756",{"type":378,"url":379},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455425",{"type":288,"url":381},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2298.yaml",{"type":300,"url":198},{"type":288,"url":384},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34756.json",[255,248,261],{"id":95,"slug":387,"dossier":46,"summary":388,"aliases":389,"sourceIds":391,"published":392,"modified":393,"checkedAt":7,"severity":394,"references":397,"versionKeys":411,"packageCount":32,"repositoryCount":88},"ghsa-3ww4-5jv9-j5gm-a5372bc1","vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors",[390,185],"CVE-2026-47155",[95,185],"2026-06-10T17:11:38Z","2026-07-17T16:30:30.495129102Z",[395],{"type":284,"score":396},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[398,400,402,404,406,408,409],{"type":291,"url":399},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3ww4-5jv9-j5gm",{"type":291,"url":401},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47155",{"type":378,"url":403},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F42616",{"type":363,"url":405},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd26a28ab033697f55a1414b5b0435de7cd6045b6",{"type":288,"url":407},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2301.yaml",{"type":300,"url":198},{"type":291,"url":410},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f1e24c0-87d2-4f6c-a705-820f380879ac",[255,248,261],{"id":96,"slug":413,"dossier":46,"summary":414,"aliases":415,"sourceIds":417,"published":418,"modified":419,"checkedAt":7,"severity":420,"references":423,"versionKeys":435,"packageCount":32,"repositoryCount":32},"ghsa-4qjh-9fv9-r85r-e1501317","Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching",[416,166],"CVE-2025-46570",[96,166],"2025-05-28T18:02:24Z","2026-02-04T03:48:23.274649Z",[421],{"type":284,"score":422},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[424,426,428,430,432,434],{"type":291,"url":425},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4qjh-9fv9-r85r",{"type":291,"url":427},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46570",{"type":378,"url":429},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17045",{"type":363,"url":431},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F77073c77bc2006eb80ea6d5128f076f5e6c6f54f",{"type":288,"url":433},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-53.yaml",{"type":300,"url":198},[261],{"id":97,"slug":437,"dossier":46,"summary":438,"aliases":439,"sourceIds":441,"published":442,"modified":443,"checkedAt":7,"severity":444,"references":447,"versionKeys":475,"packageCount":32,"repositoryCount":88},"ghsa-4r2x-xpjr-7cvv-b37b8fa2","vLLM has RCE In Video Processing",[440,194],"CVE-2026-22778",[97,194],"2026-02-02T17:43:45Z","2026-07-17T16:30:29.022952299Z",[445],{"type":284,"score":446},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[448,450,452,454,456,458,459,461,462,464,466,468,470,471,472,473],{"type":288,"url":449},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":291,"url":451},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22778",{"type":288,"url":453},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32319",{"type":288,"url":455},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F31987",{"type":288,"url":457},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22778.json",{"type":300,"url":301},{"type":288,"url":460},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.1",{"type":300,"url":198},{"type":288,"url":463},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-565.yaml",{"type":291,"url":465},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":288,"url":467},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2436113",{"type":288,"url":469},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22778",{"type":288,"url":316},{"type":288,"url":318},{"type":288,"url":320},{"type":288,"url":474},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",[255,248,261],{"id":98,"slug":477,"dossier":46,"summary":478,"aliases":479,"sourceIds":481,"published":482,"modified":483,"checkedAt":7,"severity":484,"references":490,"versionKeys":505,"packageCount":32,"repositoryCount":88},"ghsa-5jv2-g5wq-cmr4-b1c3983f","vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving",[480,188],"CVE-2026-53923",[98,188],"2026-06-17T14:03:11Z","2026-07-17T16:30:30.538194678Z",[485,487],{"type":284,"score":486},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":488,"score":489},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[491,493,495,497,499,501,503,504],{"type":288,"url":492},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":291,"url":494},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53923",{"type":288,"url":496},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44971",{"type":288,"url":498},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff219788f91952827132fa4fdf916427cd20d225e",{"type":291,"url":500},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":288,"url":502},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3403.yaml",{"type":300,"url":198},{"type":300,"url":301},[255,248,261],{"id":99,"slug":507,"dossier":46,"summary":508,"aliases":509,"sourceIds":511,"published":512,"modified":513,"checkedAt":7,"severity":514,"references":516,"versionKeys":535,"packageCount":32,"repositoryCount":88},"ghsa-69j4-grxj-j64p-ff78c10b","vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`",[510,172],"CVE-2025-62426",[99,172],"2025-11-20T21:26:24Z","2026-07-17T16:30:30.603743359Z",[515],{"type":284,"score":360},[517,519,521,523,525,527,529,530,532,534],{"type":288,"url":518},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":291,"url":520},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62426",{"type":288,"url":522},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27205",{"type":288,"url":524},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F3ada34f9cb4d1af763fdfa3b481862a93eb6bd2b",{"type":291,"url":526},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":288,"url":528},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2012.yaml",{"type":300,"url":198},{"type":288,"url":531},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fchat_utils.py#L1602-L1610",{"type":288,"url":533},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fserving_engine.py#L809-L814",{"type":300,"url":301},[255,248,261],{"id":100,"slug":537,"dossier":46,"summary":538,"aliases":539,"sourceIds":541,"published":542,"modified":543,"checkedAt":7,"severity":544,"references":549,"versionKeys":563,"packageCount":32,"repositoryCount":88},"ghsa-6c4r-fmh3-7rh8-a82d795c","vLLM: Processing differential in multi-channel audio downmixing enables hidden-input\u002Fmoderation bypass for audio models",[540,183],"CVE-2026-34760",[100,183],"2026-04-02T20:16:25.437Z","2026-07-17T17:00:52.155049383Z",[545,547],{"type":284,"score":546},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",{"type":284,"score":548},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[550,552,554,556,558,560,561],{"type":291,"url":551},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6c4r-fmh3-7rh8",{"type":291,"url":553},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34760",{"type":378,"url":555},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37058",{"type":363,"url":557},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fc7f98b4d0a63b32ed939e2b6dfaa8a626e9b46c4",{"type":288,"url":559},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2299.yaml",{"type":300,"url":198},{"type":291,"url":562},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.18.0",[255,248,261],{"id":101,"slug":565,"dossier":46,"summary":566,"aliases":567,"sourceIds":569,"published":570,"modified":571,"checkedAt":7,"severity":572,"references":574,"versionKeys":587,"packageCount":32,"repositoryCount":322},"ghsa-6fvq-23cw-5628-8eb01b7c","vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server",[568,173],"CVE-2025-61620",[101,173],"2025-10-07T21:35:22Z","2026-07-07T17:56:38.020494737Z",[573],{"type":284,"score":360},[575,577,579,581,582,583,585],{"type":288,"url":576},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":288,"url":578},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F25794",{"type":288,"url":580},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F7977e5027c2250a4abc1f474c5619c40b4e5682f",{"type":300,"url":198},{"type":300,"url":301},{"type":291,"url":584},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":291,"url":586},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61620",[255,261],{"id":102,"slug":589,"dossier":46,"summary":590,"aliases":591,"sourceIds":593,"published":594,"modified":595,"checkedAt":7,"severity":596,"references":598,"versionKeys":615,"packageCount":32,"repositoryCount":88},"ghsa-6pr9-rp53-2pmc-1471f1e7","vLLM: OOM Denial of Service via Audio Decompression Bomb",[592,189],"CVE-2026-54233",[102,189],"2026-06-17T14:06:22Z","2026-07-17T16:45:18.929893807Z",[597],{"type":284,"score":360},[599,601,603,605,607,609,611,612,614],{"type":288,"url":600},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":291,"url":602},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54233",{"type":288,"url":604},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44970",{"type":288,"url":606},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F1b1359c33269446f13c05da9a90c25174cbea590",{"type":291,"url":608},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":288,"url":610},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3404.yaml",{"type":300,"url":198},{"type":288,"url":613},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.23.1rc0",{"type":300,"url":301},[255,248,261],{"id":103,"slug":617,"dossier":46,"summary":618,"aliases":619,"sourceIds":621,"published":622,"modified":623,"checkedAt":7,"severity":624,"references":626,"versionKeys":641,"packageCount":32,"repositoryCount":32},"ghsa-6qc9-v4r8-22xg-0e64781f","vLLM DOS: Remotely kill vllm over http with invalid JSON schema",[620,167],"CVE-2025-48942",[103,167],"2025-05-28T19:41:53Z","2026-02-04T02:16:15.150519Z",[625],{"type":284,"score":360},[627,630,632,634,636,638,640],{"type":628,"url":629},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6qc9-v4r8-22xg",{"type":291,"url":631},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48942",{"type":378,"url":633},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17248",{"type":378,"url":635},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17623",{"type":363,"url":637},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F08bf7840780980c7568c573c70a6a8db94fd45ff",{"type":288,"url":639},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-54.yaml",{"type":300,"url":198},[261],{"id":104,"slug":643,"dossier":46,"summary":644,"aliases":645,"sourceIds":647,"published":648,"modified":649,"checkedAt":7,"severity":650,"references":652,"versionKeys":690,"packageCount":32,"repositoryCount":322},"ghsa-7972-pg2x-xr59-8de5a611","vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out",[646,218],"CVE-2026-27893",[104,218],"2026-03-27T00:16:22.333Z","2026-07-17T16:30:29.029310389Z",[651],{"type":284,"score":285},[653,655,657,659,661,663,664,666,668,670,672,674,676,678,680,682,684,686,688],{"type":291,"url":654},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7972-pg2x-xr59",{"type":291,"url":656},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27893",{"type":378,"url":658},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F36192",{"type":363,"url":660},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F00bd08edeee5dd4d4c13277c0114a464011acf72",{"type":288,"url":662},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-27893.json",{"type":300,"url":198},{"type":288,"url":665},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2297.yaml",{"type":378,"url":667},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2452055",{"type":288,"url":669},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-27893",{"type":291,"url":671},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8748",{"type":291,"url":673},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8747",{"type":291,"url":675},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8746",{"type":291,"url":677},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":291,"url":679},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":291,"url":681},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19725",{"type":291,"url":683},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19724",{"type":291,"url":685},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10140",{"type":291,"url":687},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10141",{"type":291,"url":689},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",[255,248],{"id":105,"slug":692,"dossier":46,"summary":693,"aliases":694,"sourceIds":696,"published":697,"modified":698,"checkedAt":7,"severity":699,"references":704,"versionKeys":719,"packageCount":32,"repositoryCount":88},"ghsa-7h4p-rffg-7823-c840dc90","vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels",[695,190],"CVE-2026-54235",[105,190],"2026-06-17T14:02:22Z","2026-07-17T16:45:18.824754082Z",[700,702],{"type":284,"score":701},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":488,"score":703},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[705,707,709,711,713,715,717,718],{"type":288,"url":706},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":291,"url":708},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54235",{"type":288,"url":710},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45116",{"type":288,"url":712},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd598d239737cfa37bcfcb98886ec3f3557fc7198",{"type":291,"url":714},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":288,"url":716},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3405.yaml",{"type":300,"url":198},{"type":300,"url":301},[255,248,261],{"id":106,"slug":721,"dossier":46,"summary":722,"aliases":723,"sourceIds":725,"published":726,"modified":727,"checkedAt":7,"severity":728,"references":731,"versionKeys":746,"packageCount":32,"repositoryCount":88},"ghsa-8fr4-5q9j-m8gm-9a59ba60","vLLM vulnerable to remote code execution via transformers_utils\u002Fget_config",[724,174],"CVE-2025-66448",[106,174],"2025-12-02T17:34:16Z","2026-07-17T16:30:30.600907369Z",[729],{"type":284,"score":730},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[732,734,736,738,740,742,744,745],{"type":288,"url":733},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":291,"url":735},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66448",{"type":288,"url":737},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F28126",{"type":288,"url":739},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fffb08379d8870a1a81ba82b72797f196838d0c86",{"type":291,"url":741},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":288,"url":743},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2015.yaml",{"type":300,"url":198},{"type":300,"url":301},[255,248,261],{"id":107,"slug":748,"dossier":46,"summary":749,"aliases":750,"sourceIds":752,"published":753,"modified":754,"checkedAt":7,"severity":755,"references":758,"versionKeys":777,"packageCount":32,"repositoryCount":32},"ghsa-8jr5-v98p-w75m-be5fb565","vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations",[751,236],"CVE-2026-12491",[107,236],"2026-06-17T14:02:42Z","2026-07-17T16:45:18.723841391Z",[756],{"type":284,"score":757},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[759,761,763,765,767,769,771,773,775,776],{"type":288,"url":760},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":291,"url":762},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12491",{"type":288,"url":764},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44974",{"type":288,"url":766},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fcf1c90672404548aa3bc51f92c4745576a65ee26",{"type":288,"url":768},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-12491",{"type":288,"url":770},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2489786",{"type":291,"url":772},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":288,"url":774},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3406.yaml",{"type":300,"url":198},{"type":300,"url":301},[248],{"id":108,"slug":779,"dossier":46,"summary":780,"aliases":781,"sourceIds":783,"published":784,"modified":785,"checkedAt":7,"severity":786,"references":789,"versionKeys":813,"packageCount":32,"repositoryCount":88},"ghsa-94f4-hr76-p5j6-34e6691e","vLLM: OpenAI auth bypass",[782,181],"CVE-2026-48746",[108,181],"2026-06-16T17:36:41Z","2026-07-17T16:30:30.589294814Z",[787],{"type":284,"score":788},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[790,792,794,796,798,800,801,802,804,806,808,809,811],{"type":291,"url":791},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-94f4-hr76-p5j6",{"type":291,"url":793},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48746",{"type":378,"url":795},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F43426",{"type":288,"url":797},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":288,"url":799},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":288,"url":372},{"type":288,"url":374},{"type":288,"url":803},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48746",{"type":288,"url":805},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491581",{"type":288,"url":807},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-226.yaml",{"type":300,"url":198},{"type":288,"url":810},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48746.json",{"type":291,"url":812},"https:\u002F\u002Fx41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",[255,248,261],{"id":109,"slug":815,"dossier":46,"summary":816,"aliases":817,"sourceIds":819,"published":820,"modified":821,"checkedAt":7,"severity":822,"references":827,"versionKeys":846,"packageCount":32,"repositoryCount":88},"ghsa-98f3-hwg4-4rf7-af876537","vllm has Improper Resource Shutdown or Release",[818,191],"CVE-2026-9540",[109,191],"2026-05-26T15:32:10Z","2026-07-13T16:43:04.792575152Z",[823,825],{"type":284,"score":824},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":488,"score":826},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[828,830,832,834,835,837,839,841,843,844],{"type":291,"url":829},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9540",{"type":288,"url":831},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F37343",{"type":288,"url":833},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37594",{"type":300,"url":198},{"type":288,"url":836},"https:\u002F\u002Fingero.io\u002Fdebugging-vllm-latency-minimax-ollama-mcp",{"type":288,"url":838},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F814645",{"type":288,"url":840},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601",{"type":288,"url":842},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601\u002Fcti",{"type":300,"url":301},{"type":291,"url":845},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-98f3-hwg4-4rf7",[255,248,261],{"id":110,"slug":848,"dossier":46,"summary":849,"aliases":850,"sourceIds":852,"published":853,"modified":854,"checkedAt":7,"severity":855,"references":857,"versionKeys":869,"packageCount":32,"repositoryCount":32},"ghsa-9hcf-v7m4-6m2j-d85c17a2","vLLM allows clients to crash the openai server with invalid regex",[851,168],"CVE-2025-48943",[110,168],"2025-05-28T19:42:12Z","2026-02-04T02:59:05.360205Z",[856],{"type":284,"score":360},[858,860,862,864,865,866,868],{"type":291,"url":859},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9hcf-v7m4-6m2j",{"type":291,"url":861},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48943",{"type":378,"url":863},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17313",{"type":378,"url":635},{"type":363,"url":637},{"type":288,"url":867},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-55.yaml",{"type":300,"url":198},[261],{"id":111,"slug":871,"dossier":46,"summary":872,"aliases":873,"sourceIds":875,"published":876,"modified":877,"checkedAt":7,"severity":878,"references":881,"versionKeys":896,"packageCount":32,"repositoryCount":32},"ghsa-9pcc-gvx5-r5wm-4c73fdb6","Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration",[874,175],"CVE-2025-30165",[111,175],"2025-05-06T16:38:35Z","2026-07-17T16:30:32.007556436Z",[879],{"type":284,"score":880},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[882,884,886,888,890,891,893,895],{"type":288,"url":883},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":291,"url":885},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30165",{"type":291,"url":887},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":288,"url":889},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2017.yaml",{"type":300,"url":198},{"type":288,"url":892},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L295-L301",{"type":288,"url":894},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L468-L470",{"type":300,"url":301},[261],{"id":112,"slug":898,"dossier":46,"summary":899,"aliases":900,"sourceIds":902,"published":903,"modified":904,"checkedAt":7,"severity":905,"references":908,"versionKeys":920,"packageCount":32,"repositoryCount":32},"ghsa-c65p-x677-fgj6-db33633a","vLLM has a Weakness in MultiModalHasher Image Hashing Implementation",[901,164],"CVE-2025-46722",[112,164],"2025-05-28T18:03:41Z","2026-02-04T03:00:21.842092Z",[906],{"type":284,"score":907},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[909,911,913,915,917,919],{"type":291,"url":910},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-c65p-x677-fgj6",{"type":291,"url":912},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46722",{"type":288,"url":914},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17378",{"type":363,"url":916},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F99404f53c72965b41558aceb1bc2380875f5d848",{"type":288,"url":918},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-43.yaml",{"type":300,"url":198},[261],{"id":113,"slug":922,"dossier":46,"summary":923,"aliases":924,"sourceIds":926,"published":927,"modified":928,"checkedAt":7,"severity":929,"references":933,"versionKeys":945,"packageCount":32,"repositoryCount":88},"ghsa-grg2-63fw-f2qr-b9670d50","vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions",[925,169],"CVE-2026-22773",[113,169],"2026-01-10T07:16:03.527Z","2026-06-08T20:00:15.842086505Z",[930,931],{"type":284,"score":360},{"type":284,"score":932},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[934,936,938,940,942,944],{"type":628,"url":935},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-grg2-63fw-f2qr",{"type":291,"url":937},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22773",{"type":288,"url":939},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F29881",{"type":288,"url":941},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F0ec84221718d920c3f46da879cc354f94b8fb59e",{"type":288,"url":943},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-143.yaml",{"type":300,"url":198},[255,248,261],{"id":114,"slug":947,"dossier":46,"summary":948,"aliases":949,"sourceIds":951,"published":952,"modified":953,"checkedAt":7,"severity":954,"references":957,"versionKeys":972,"packageCount":32,"repositoryCount":88},"ghsa-hgg8-fqqc-vfmw-ba9b1162","vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router",[950,192],"CVE-2026-54236",[114,192],"2026-06-17T14:04:09Z","2026-07-20T13:45:32.249353382Z",[955],{"type":284,"score":956},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[958,960,962,964,966,968,970,971],{"type":288,"url":959},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":291,"url":961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54236",{"type":288,"url":963},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45119",{"type":288,"url":965},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F94923629729381d7f7c9efde72071a2441f7fd82",{"type":291,"url":967},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":288,"url":969},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3408.yaml",{"type":300,"url":198},{"type":300,"url":301},[255,248,261],{"id":115,"slug":974,"dossier":46,"summary":975,"aliases":976,"sourceIds":978,"published":979,"modified":980,"checkedAt":7,"severity":981,"references":983,"versionKeys":996,"packageCount":32,"repositoryCount":88},"ghsa-hpv8-x276-m59f-6a62e8b6","vLLM Vulnerable to Remote DoS via Special-Token Placeholders",[977,193],"CVE-2026-44222",[115,193],"2026-05-05T22:21:41Z","2026-07-17T16:30:29.072224452Z",[982],{"type":284,"score":360},[984,986,988,990,992,994,995],{"type":288,"url":985},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":291,"url":987},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44222",{"type":288,"url":989},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F32656",{"type":291,"url":991},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":288,"url":993},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3409.yaml",{"type":300,"url":198},{"type":300,"url":301},[255,248,261],{"id":116,"slug":998,"dossier":46,"summary":999,"aliases":1000,"sourceIds":1002,"published":1003,"modified":1004,"checkedAt":7,"severity":1005,"references":1008,"versionKeys":1016,"packageCount":32,"repositoryCount":32},"ghsa-j828-28rj-hfhp-e66dafb9","vLLM vulnerable to Regular Expression Denial of Service",[1001],"CVE-2025-71379",[116],"2025-05-28T17:50:06Z","2026-07-08T07:35:38.046987158Z",[1006],{"type":284,"score":1007},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1009,1011,1013,1015],{"type":288,"url":1010},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-j828-28rj-hfhp",{"type":288,"url":1012},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F18454",{"type":288,"url":1014},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F4fc1bf813ad80172c1db31264beaef7d93fe0601",{"type":300,"url":198},[261],{"id":117,"slug":1018,"dossier":46,"summary":1019,"aliases":1020,"sourceIds":1022,"published":1023,"modified":1024,"checkedAt":7,"severity":1025,"references":1029,"versionKeys":1037,"packageCount":32,"repositoryCount":32},"ghsa-mcmc-2m55-j8jj-ea2fc7d3","vLLM introduced enhanced protection for CVE-2025-62164",[1021,235],"CVE-2026-56340",[117,235],"2026-01-08T21:47:43Z","2026-06-27T11:26:32.894007747Z",[1026,1028],{"type":284,"score":1027},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":284,"score":932},[1030,1032,1034,1035],{"type":291,"url":1031},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mcmc-2m55-j8jj",{"type":288,"url":1033},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F30649",{"type":300,"url":198},{"type":291,"url":1036},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fvllm-denial-of-service-via-unvalidated-multimodal-embeddings",[248],{"id":118,"slug":1039,"dossier":46,"summary":1040,"aliases":1041,"sourceIds":1043,"published":1044,"modified":1045,"checkedAt":7,"severity":1046,"references":1048,"versionKeys":1063,"packageCount":32,"repositoryCount":32},"ghsa-mrw7-hf4f-83pf-125f2ed3","vLLM deserialization vulnerability leading to DoS and potential RCE",[1042,234],"CVE-2025-62164",[118,234],"2025-11-20T20:59:34Z","2026-07-17T16:30:30.638326686Z",[1047],{"type":284,"score":1027},[1049,1051,1053,1055,1057,1059,1061,1062],{"type":288,"url":1050},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":291,"url":1052},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62164",{"type":288,"url":1054},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27204",{"type":288,"url":1056},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58fab50d82838d5014f4a14d991fdb9352c9c84b",{"type":291,"url":1058},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":288,"url":1060},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2018.yaml",{"type":300,"url":198},{"type":300,"url":301},[248],{"id":119,"slug":1065,"dossier":46,"summary":1066,"aliases":1067,"sourceIds":1069,"published":1070,"modified":1071,"checkedAt":7,"severity":1072,"references":1076,"versionKeys":1091,"packageCount":32,"repositoryCount":88},"ghsa-pmqf-x6x8-p7qw-b2778e4b","vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs",[1068,176],"CVE-2025-62372",[119,176],"2025-11-20T21:23:29Z","2026-07-17T16:30:32.010515304Z",[1073,1074],{"type":284,"score":360},{"type":488,"score":1075},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1077,1079,1081,1082,1084,1085,1087,1089,1090],{"type":288,"url":1078},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":291,"url":1080},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62372",{"type":288,"url":1054},{"type":288,"url":1083},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F6613",{"type":288,"url":1056},{"type":291,"url":1086},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":288,"url":1088},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2019.yaml",{"type":300,"url":198},{"type":300,"url":301},[255,248,261],{"id":120,"slug":1093,"dossier":46,"summary":1094,"aliases":1095,"sourceIds":1097,"published":1098,"modified":1099,"checkedAt":7,"severity":1100,"references":1102,"versionKeys":1122,"packageCount":32,"repositoryCount":88},"ghsa-pq5c-rjhq-qp7p-741b6a4f","vLLM: Denial of Service via Unbounded Frame Count in video\u002Fjpeg Base64 Processing",[1096,170],"CVE-2026-34755",[120,170],"2026-04-03T21:51:35Z","2026-07-17T16:30:29.016474105Z",[1101],{"type":284,"score":360},[1103,1105,1107,1109,1111,1112,1113,1115,1117,1119,1120],{"type":363,"url":1104},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5c-rjhq-qp7p",{"type":291,"url":1106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34755",{"type":288,"url":1108},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F38636",{"type":288,"url":1110},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58ee61422169ce17e08248f8efa1e9df434fe395",{"type":288,"url":372},{"type":288,"url":374},{"type":288,"url":1114},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34755",{"type":288,"url":1116},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455403",{"type":288,"url":1118},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-144.yaml",{"type":300,"url":198},{"type":288,"url":1121},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34755.json",[255,248,261],{"id":121,"slug":1124,"dossier":46,"summary":1125,"aliases":1126,"sourceIds":1128,"published":1129,"modified":1130,"checkedAt":7,"severity":1131,"references":1134,"versionKeys":1154,"packageCount":32,"repositoryCount":88},"ghsa-q8gq-377p-jq3r-b6095d17","vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution",[1127,184],"CVE-2026-41523",[121,184],"2026-06-16T17:34:49Z","2026-07-17T16:30:30.544440776Z",[1132],{"type":284,"score":1133},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1135,1137,1139,1141,1142,1143,1145,1147,1149,1150,1152],{"type":628,"url":1136},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-q8gq-377p-jq3r",{"type":291,"url":1138},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41523",{"type":363,"url":1140},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb3c7ffcab82c2439726f8cb213800f6f38c023d3",{"type":291,"url":372},{"type":291,"url":374},{"type":288,"url":1144},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-41523",{"type":378,"url":1146},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491582",{"type":288,"url":1148},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2300.yaml",{"type":300,"url":198},{"type":291,"url":1151},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdcb05b04-e625-41e7-adbc-bbae0cc2d64c",{"type":288,"url":1153},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-41523.json",[255,248,261],{"id":122,"slug":1156,"dossier":46,"summary":1157,"aliases":1158,"sourceIds":1160,"published":1161,"modified":1162,"checkedAt":7,"severity":1163,"references":1166,"versionKeys":1192,"packageCount":32,"repositoryCount":88},"ghsa-qh4c-xf7m-gxfc-81424acf","vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector",[1159,177],"CVE-2026-24779",[122,177],"2026-01-28T16:14:28Z","2026-07-17T16:30:32.009053490Z",[1164],{"type":284,"score":1165},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[1167,1169,1171,1173,1175,1177,1178,1179,1181,1183,1185,1187,1188,1189,1190,1191],{"type":288,"url":1168},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":291,"url":1170},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24779",{"type":288,"url":1172},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32746",{"type":288,"url":1174},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff46d576c54fb8aeec5fc70560e850bed38ef17d7",{"type":288,"url":1176},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24779.json",{"type":300,"url":301},{"type":300,"url":198},{"type":288,"url":1180},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2020.yaml",{"type":291,"url":1182},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":288,"url":1184},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433624",{"type":288,"url":1186},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24779",{"type":288,"url":316},{"type":288,"url":320},{"type":288,"url":474},{"type":288,"url":799},{"type":288,"url":797},[255,248,261],{"id":123,"slug":1194,"dossier":46,"summary":1195,"aliases":1196,"sourceIds":1198,"published":1199,"modified":1200,"checkedAt":7,"severity":1201,"references":1205,"versionKeys":1217,"packageCount":32,"repositoryCount":88},"ghsa-rwxx-mrjm-wc2m-e234c364","vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends",[1197,186],"CVE-2026-55574",[123,186],"2026-07-06T21:16:57.347Z","2026-07-17T17:15:51.409816079Z",[1202,1203],{"type":284,"score":932},{"type":488,"score":1204},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1206,1208,1210,1212,1214,1216],{"type":291,"url":1207},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rwxx-mrjm-wc2m",{"type":291,"url":1209},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55574",{"type":363,"url":1211},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45118",{"type":363,"url":1213},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F2b3006076c5e9bc4cda9e03e3641388de3c5c286",{"type":288,"url":1215},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2304.yaml",{"type":300,"url":198},[255,248,261],{"id":124,"slug":1219,"dossier":46,"summary":1220,"aliases":1221,"sourceIds":1223,"published":1224,"modified":1225,"checkedAt":7,"severity":1226,"references":1228,"versionKeys":1243,"packageCount":32,"repositoryCount":32},"ghsa-rxc4-3w6r-4v47-0c8c9269","vllm API endpoints vulnerable to Denial of Service Attacks",[1222,178],"CVE-2025-48956",[124,178],"2025-08-21T14:24:16Z","2026-07-17T16:30:30.538696375Z",[1227],{"type":284,"score":932},[1229,1231,1233,1235,1237,1239,1241,1242],{"type":288,"url":1230},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":291,"url":1232},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48956",{"type":288,"url":1234},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F23267",{"type":288,"url":1236},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd8b736f913a59117803d6701521d2e4861701944",{"type":291,"url":1238},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":288,"url":1240},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2021.yaml",{"type":300,"url":198},{"type":300,"url":301},[261],{"id":125,"slug":1245,"dossier":46,"summary":1246,"aliases":1247,"sourceIds":1249,"published":1250,"modified":1251,"checkedAt":7,"severity":1252,"references":1254,"versionKeys":1266,"packageCount":32,"repositoryCount":32},"ghsa-vrq3-r879-7m65-0fc59d0f","vLLM Tool Schema allows DoS via Malformed pattern and type Fields",[1248,179],"CVE-2025-48944",[125,179],"2025-05-28T19:42:32Z","2026-07-17T16:30:29.005158547Z",[1253],{"type":284,"score":360},[1255,1257,1259,1260,1262,1264,1265],{"type":288,"url":1256},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":291,"url":1258},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48944",{"type":288,"url":635},{"type":291,"url":1261},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":288,"url":1263},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2023.yaml",{"type":300,"url":198},{"type":300,"url":301},[261],{"id":126,"slug":1268,"dossier":46,"summary":1269,"aliases":1270,"sourceIds":1272,"published":1273,"modified":1274,"checkedAt":7,"severity":1275,"references":1277,"versionKeys":1289,"packageCount":32,"repositoryCount":32},"ghsa-w6q7-j642-7c25-391074f5","vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`",[1271,165],"CVE-2025-48887",[126,165],"2025-05-28T17:49:33Z","2026-06-10T17:14:19.371824623Z",[1276],{"type":284,"score":360},[1278,1280,1282,1283,1284,1286,1287],{"type":628,"url":1279},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",{"type":291,"url":1281},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48887",{"type":378,"url":1012},{"type":363,"url":1014},{"type":288,"url":1285},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-50.yaml",{"type":300,"url":198},{"type":291,"url":1288},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",[261],{"id":127,"slug":1291,"dossier":46,"summary":1292,"aliases":1293,"sourceIds":1295,"published":1296,"modified":1297,"checkedAt":7,"severity":1298,"references":1300,"versionKeys":1317,"packageCount":32,"repositoryCount":322},"ghsa-wr9h-g72x-mwhm-9f241db1","vLLM is vulnerable to timing attack at bearer auth",[1294,180],"CVE-2025-59425",[127,180],"2025-10-07T17:24:47Z","2026-07-17T16:30:30.606191061Z",[1299],{"type":284,"score":486},[1301,1303,1305,1307,1309,1311,1312,1314,1316],{"type":288,"url":1302},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":291,"url":1304},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59425",{"type":288,"url":1306},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fee10d7e6ff5875386c7f136ce8b5f525c8fcef48",{"type":291,"url":1308},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":288,"url":1310},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2026.yaml",{"type":300,"url":198},{"type":288,"url":1313},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F4b946d693e0af15740e9ca9c0e059d5f333b1083\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fapi_server.py#L1270-L1274",{"type":288,"url":1315},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.11.0",{"type":300,"url":301},[255,261],{"id":128,"slug":1319,"dossier":46,"summary":1320,"aliases":1321,"sourceIds":1323,"published":1324,"modified":1325,"checkedAt":7,"severity":1326,"references":1333,"versionKeys":1352,"packageCount":32,"repositoryCount":88},"ghsa-x368-4g9h-fvv4-37873c2f","vLLM makes Use of Uninitialized Resource",[1322,187],"CVE-2026-7141",[128,187],"2026-04-27T17:16:45.637Z","2026-07-13T16:45:11.279169812Z",[1327,1329,1331],{"type":284,"score":1328},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":488,"score":1330},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":488,"score":1332},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1334,1336,1338,1340,1342,1344,1346,1348,1350],{"type":291,"url":1335},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-7141",{"type":378,"url":1337},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146",{"type":378,"url":1339},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146#issue-4215090365",{"type":363,"url":1341},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F39283",{"type":363,"url":1343},"https:\u002F\u002Fgithub.com\u002FAjAnubolu\u002Fvllm\u002Fcommit\u002F1ad67864c0c20f167929e64c875f5c28e1aad9fd",{"type":291,"url":1345},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F801297",{"type":291,"url":1347},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740",{"type":378,"url":1349},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740\u002Fcti",{"type":291,"url":1351},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x368-4g9h-fvv4",[255,248,261],{"id":129,"slug":1354,"dossier":46,"summary":87,"aliases":1355,"sourceIds":1358,"published":1359,"modified":1360,"checkedAt":7,"severity":1361,"references":1363,"versionKeys":1366,"packageCount":32,"repositoryCount":88},"pysec-2026-227-5f5a1d28",[1356,1357],"CVE-2026-54232","GHSA-jrf6-vqxq-pjv2",[129],"2026-06-22T23:16:30.873Z","2026-06-26T00:00:06.054142968Z",[1362],{"type":284,"score":285},[1364],{"type":628,"url":1365},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-jrf6-vqxq-pjv2",[255,248,261],{"id":130,"slug":1368,"dossier":46,"summary":87,"aliases":1369,"sourceIds":1371,"published":1372,"modified":1373,"checkedAt":7,"severity":1374,"references":1376,"versionKeys":1386,"packageCount":32,"repositoryCount":88},"pysec-2026-2302-60c0b148",[1370],"CVE-2026-5497",[130],"2026-06-11T10:16:21.903Z","2026-07-13T07:15:46.584903724Z",[1375],{"type":284,"score":932},[1377,1379,1381,1383,1384],{"type":288,"url":1378},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5497",{"type":288,"url":1380},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5497.json",{"type":378,"url":1382},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2487813",{"type":363,"url":1110},{"type":628,"url":1385},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F7bd92629-b396-4449-8f88-6c0092530eb4",[255,248,261],1784560118725]