[{"data":1,"prerenderedAt":1391},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-vllm-571f04fc":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":242,"related":263},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:52:27.520Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:50:55.687Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":82,"category":83,"aiRelevant":84,"provider":85,"repositoryCount":86,"occurrenceCount":86,"directRepositoryCount":37,"versionCount":86,"licenseExpressions":87,"advisoryIds":89,"advisoryCount":129,"verifiedAttestation":45,"repositories":130,"versions":152},"package:pypi:vllm","vllm-571f04fc","pypi:vllm","pypi","vllm","vLLM","model-runtime",true,null,3,[88],"Apache-2.0",[90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128],"GHSA-2pc9-4j83-qjmr","GHSA-3f6c-7fw2-ppm4","GHSA-3mwp-wvh9-7528","GHSA-3ww4-5jv9-j5gm","GHSA-4qjh-9fv9-r85r","GHSA-4r2x-xpjr-7cvv","GHSA-5jv2-g5wq-cmr4","GHSA-69j4-grxj-j64p","GHSA-6c4r-fmh3-7rh8","GHSA-6fvq-23cw-5628","GHSA-6pr9-rp53-2pmc","GHSA-6qc9-v4r8-22xg","GHSA-7972-pg2x-xr59","GHSA-7h4p-rffg-7823","GHSA-8fr4-5q9j-m8gm","GHSA-8jr5-v98p-w75m","GHSA-94f4-hr76-p5j6","GHSA-98f3-hwg4-4rf7","GHSA-9hcf-v7m4-6m2j","GHSA-9pcc-gvx5-r5wm","GHSA-c65p-x677-fgj6","GHSA-grg2-63fw-f2qr","GHSA-hgg8-fqqc-vfmw","GHSA-hpv8-x276-m59f","GHSA-j828-28rj-hfhp","GHSA-mcmc-2m55-j8jj","GHSA-mrw7-hf4f-83pf","GHSA-pmqf-x6x8-p7qw","GHSA-pq5c-rjhq-qp7p","GHSA-q8gq-377p-jq3r","GHSA-qh4c-xf7m-gxfc","GHSA-rwxx-mrjm-wc2m","GHSA-rxc4-3w6r-4v47","GHSA-vrq3-r879-7m65","GHSA-w6q7-j642-7c25","GHSA-wr9h-g72x-mwhm","GHSA-x368-4g9h-fvv4","PYSEC-2026-227","PYSEC-2026-2302",39,[131,138,145],{"id":132,"slug":133,"name":134,"pathWithNamespace":135,"versions":136,"evidenceCount":32},"opencode:7674","opencode-7674","Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation",[137],"0.11.0",{"id":139,"slug":140,"name":141,"pathWithNamespace":142,"versions":143,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[144],"0.10.1.1",{"id":146,"slug":147,"name":148,"pathWithNamespace":149,"versions":150,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[151],"0.8.5.post1",[153,208,225],{"version":151,"repositoryCount":32,"occurrenceCount":32,"ageDays":154,"advisoryIds":155,"metadata":156},467,[91,92,93,94,95,96,97,98,99,100,101,103,104,106,107,108,109,110,111,112,113,114,117,118,119,120,121,122,123,124,125,126,127,128],{"state":157,"checkedAt":158,"publishedAt":159,"deprecated":45,"deprecatedReason":85,"licenses":160,"advisoryIds":161,"links":193,"relatedProjects":202,"attestations":206,"verifiedAttestation":45,"projectStatus":207},"resolved","2026-08-13T02:29:21.454Z","2025-05-02T22:31:02Z",[88],[91,92,93,94,95,96,97,98,99,100,101,103,104,106,107,108,109,110,111,112,113,114,117,118,119,120,121,122,123,124,125,126,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,127,180,181,182,183,128,184,185,186,187,188,189,190,191,192],"PYSEC-2025-43","PYSEC-2025-50","PYSEC-2025-53","PYSEC-2025-54","PYSEC-2025-55","PYSEC-2026-143","PYSEC-2026-144","PYSEC-2026-2011","PYSEC-2026-2012","PYSEC-2026-2013","PYSEC-2026-2015","PYSEC-2026-2017","PYSEC-2026-2019","PYSEC-2026-2020","PYSEC-2026-2021","PYSEC-2026-2023","PYSEC-2026-2026","PYSEC-2026-226","PYSEC-2026-2298","PYSEC-2026-2299","PYSEC-2026-2300","PYSEC-2026-2301","PYSEC-2026-2304","PYSEC-2026-2306","PYSEC-2026-3403","PYSEC-2026-3404","PYSEC-2026-3405","PYSEC-2026-3407","PYSEC-2026-3408","PYSEC-2026-3409","PYSEC-2026-565",[194,197,200],{"label":195,"url":196},"DOCUMENTATION","https:\u002F\u002Fvllm.readthedocs.io\u002Fen\u002Flatest\u002F",{"label":198,"url":199},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm",{"label":201,"url":199},"HOMEPAGE",[203],{"id":204,"relationType":198,"relationProvenance":205},"github.com\u002Fvllm-project\u002Fvllm","UNVERIFIED_METADATA",[],"active",{"version":144,"repositoryCount":32,"occurrenceCount":32,"ageDays":209,"advisoryIds":210,"metadata":211},357,[90,91,92,93,95,96,97,98,99,100,102,103,104,106,107,111,112,113,117,118,119,120,121,125,126,127,128],{"state":157,"checkedAt":158,"publishedAt":212,"deprecated":45,"deprecatedReason":85,"licenses":213,"advisoryIds":214,"links":217,"relatedProjects":222,"attestations":224,"verifiedAttestation":45,"projectStatus":207},"2025-08-20T23:17:09Z",[88],[90,91,92,93,95,96,97,98,99,100,102,103,104,106,107,111,112,113,117,118,119,120,121,125,126,167,168,215,169,170,171,172,174,175,178,179,127,216,180,181,182,183,128,184,185,186,187,188,189,190,191,192],"PYSEC-2026-2010","PYSEC-2026-2297",[218,219,221],{"label":201,"url":199},{"label":195,"url":220},"https:\u002F\u002Fdocs.vllm.ai\u002Fen\u002Flatest\u002F",{"label":198,"url":199},[223],{"id":204,"relationType":198,"relationProvenance":205},[],{"version":137,"repositoryCount":32,"occurrenceCount":32,"ageDays":226,"advisoryIds":227,"metadata":228},313,[90,92,93,95,96,97,98,100,102,103,104,105,106,107,111,112,113,115,116,117,118,119,120,121,126,127,128],{"state":157,"checkedAt":158,"publishedAt":229,"deprecated":45,"deprecatedReason":85,"licenses":230,"advisoryIds":231,"links":235,"relatedProjects":239,"attestations":241,"verifiedAttestation":45,"projectStatus":207},"2025-10-04T01:39:32Z",[88],[90,92,93,95,96,97,98,100,102,103,104,105,106,107,111,112,113,115,116,117,118,119,120,121,126,167,168,215,170,172,232,174,175,179,127,216,180,181,182,183,128,184,185,233,186,187,188,234,189,190,191,192],"PYSEC-2026-2018","PYSEC-2026-250","PYSEC-2026-3406",[236,237,238],{"label":201,"url":199},{"label":195,"url":220},{"label":198,"url":199},[240],{"id":204,"relationType":198,"relationProvenance":205},[],{"occurrences":243,"occurrenceCount":86},[244,251,257],{"id":245,"repositoryId":132,"repositorySlug":133,"repositoryName":134,"repositoryPathWithNamespace":135,"ecosystem":80,"name":81,"identity":79,"version":137,"versionKey":246,"direct":85,"development":85,"sourceKind":247,"filePath":54,"blobSha":248,"sourceUrl":249,"commitSha":250},"component:6ba2ebd7c7693588ea5eb986","pypi:vllm@0.11.0","uv-lock","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32",{"id":252,"repositoryId":139,"repositorySlug":140,"repositoryName":141,"repositoryPathWithNamespace":142,"ecosystem":80,"name":81,"identity":79,"version":144,"versionKey":253,"direct":85,"development":85,"sourceKind":247,"filePath":54,"blobSha":254,"sourceUrl":255,"commitSha":256},"component:5f3e8a1c09e465d3492436ec","pypi:vllm@0.10.1.1","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":258,"repositoryId":146,"repositorySlug":147,"repositoryName":148,"repositoryPathWithNamespace":149,"ecosystem":80,"name":81,"identity":79,"version":151,"versionKey":259,"direct":85,"development":85,"sourceKind":247,"filePath":54,"blobSha":260,"sourceUrl":261,"commitSha":262},"component:27f212d44914467d2a5b2c19","pypi:vllm@0.8.5.post1","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"repositories":264,"vulnerabilities":271},[265,267,269],{"id":132,"slug":133,"name":134,"pathWithNamespace":135,"versions":266,"evidenceCount":32},[137],{"id":139,"slug":140,"name":141,"pathWithNamespace":142,"versions":268,"evidenceCount":32},[144],{"id":146,"slug":147,"name":148,"pathWithNamespace":149,"versions":270,"evidenceCount":32},[151],[272,321,348,384,410,434,475,505,535,563,587,615,641,690,719,746,777,818,851,874,901,925,950,977,1001,1021,1042,1068,1096,1127,1159,1197,1222,1248,1271,1294,1322,1357,1371],{"id":90,"slug":273,"dossier":45,"summary":274,"aliases":275,"sourceIds":277,"published":278,"modified":279,"checkedAt":7,"severity":280,"references":284,"versionKeys":319,"packageCount":32,"repositoryCount":320},"ghsa-2pc9-4j83-qjmr-6e2eb21d","vLLM affected by RCE via auto_map dynamic module loading during model initialization",[276,215],"CVE-2026-22807",[90,215],"2026-01-21T16:12:54Z","2026-08-07T08:11:59.370441713Z",[281],{"type":282,"score":283},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[285,288,291,293,295,297,300,302,303,305,307,309,311,313,315,317],{"type":286,"url":287},"WEB","https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":289,"url":290},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22807",{"type":286,"url":292},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32194",{"type":286,"url":294},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",{"type":286,"url":296},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22807.json",{"type":298,"url":299},"PACKAGE","https:\u002F\u002Fpypi.org\u002Fproject\u002Fvllm",{"type":286,"url":301},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.0",{"type":298,"url":199},{"type":286,"url":304},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2010.yaml",{"type":289,"url":306},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":286,"url":308},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2431865",{"type":286,"url":310},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22807",{"type":286,"url":312},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5119",{"type":286,"url":314},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":286,"url":316},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3782",{"type":286,"url":318},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3713",[253,246],2,{"id":91,"slug":322,"dossier":45,"summary":323,"aliases":324,"sourceIds":326,"published":327,"modified":328,"checkedAt":7,"severity":329,"references":332,"versionKeys":347,"packageCount":32,"repositoryCount":320},"ghsa-3f6c-7fw2-ppm4-735443b9","vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class",[325,169],"CVE-2025-6242",[91,169],"2025-10-07T22:14:15Z","2026-07-07T17:57:19.957237175Z",[330],{"type":282,"score":331},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:H",[333,335,337,339,341,343,344,345],{"type":286,"url":334},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",{"type":289,"url":336},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6242",{"type":286,"url":338},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F9d9a2b77f19f68262d5e469c4e82c0f6365ad72d",{"type":286,"url":340},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-6242",{"type":286,"url":342},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2373716",{"type":298,"url":199},{"type":298,"url":299},{"type":289,"url":346},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",[253,259],{"id":92,"slug":349,"dossier":45,"summary":350,"aliases":351,"sourceIds":353,"published":354,"modified":355,"checkedAt":7,"severity":356,"references":359,"versionKeys":383,"packageCount":32,"repositoryCount":86},"ghsa-3mwp-wvh9-7528-9c78ec85","vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server",[352,180],"CVE-2026-34756",[92,180],"2026-04-03T15:35:48Z","2026-07-17T16:30:29.032335074Z",[357],{"type":282,"score":358},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[360,363,365,367,369,371,373,375,378,380,381],{"type":361,"url":362},"FIX","https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3mwp-wvh9-7528",{"type":289,"url":364},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34756",{"type":361,"url":366},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37952",{"type":361,"url":368},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb111f8a61f100fdca08706f41f29ef3548de7380",{"type":289,"url":370},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36005",{"type":289,"url":372},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36006",{"type":286,"url":374},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34756",{"type":376,"url":377},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455425",{"type":286,"url":379},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2298.yaml",{"type":298,"url":199},{"type":286,"url":382},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34756.json",[253,246,259],{"id":93,"slug":385,"dossier":45,"summary":386,"aliases":387,"sourceIds":389,"published":390,"modified":391,"checkedAt":7,"severity":392,"references":395,"versionKeys":409,"packageCount":32,"repositoryCount":86},"ghsa-3ww4-5jv9-j5gm-a5372bc1","vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors",[388,183],"CVE-2026-47155",[93,183],"2026-06-10T17:11:38Z","2026-07-17T16:30:30.495129102Z",[393],{"type":282,"score":394},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[396,398,400,402,404,406,407],{"type":289,"url":397},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3ww4-5jv9-j5gm",{"type":289,"url":399},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47155",{"type":376,"url":401},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F42616",{"type":361,"url":403},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd26a28ab033697f55a1414b5b0435de7cd6045b6",{"type":286,"url":405},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2301.yaml",{"type":298,"url":199},{"type":289,"url":408},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f1e24c0-87d2-4f6c-a705-820f380879ac",[253,246,259],{"id":94,"slug":411,"dossier":45,"summary":412,"aliases":413,"sourceIds":415,"published":416,"modified":417,"checkedAt":7,"severity":418,"references":421,"versionKeys":433,"packageCount":32,"repositoryCount":32},"ghsa-4qjh-9fv9-r85r-e1501317","Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching",[414,164],"CVE-2025-46570",[94,164],"2025-05-28T18:02:24Z","2026-08-07T08:12:07.737844771Z",[419],{"type":282,"score":420},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[422,424,426,428,430,432],{"type":289,"url":423},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4qjh-9fv9-r85r",{"type":289,"url":425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46570",{"type":376,"url":427},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17045",{"type":361,"url":429},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F77073c77bc2006eb80ea6d5128f076f5e6c6f54f",{"type":286,"url":431},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-53.yaml",{"type":298,"url":199},[259],{"id":95,"slug":435,"dossier":45,"summary":436,"aliases":437,"sourceIds":439,"published":440,"modified":441,"checkedAt":7,"severity":442,"references":445,"versionKeys":474,"packageCount":32,"repositoryCount":86},"ghsa-4r2x-xpjr-7cvv-b37b8fa2","vLLM has RCE In Video Processing",[438,192],"CVE-2026-22778",[95,192],"2026-02-02T17:43:45Z","2026-07-17T16:30:29.022952299Z",[443],{"type":282,"score":444},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[446,448,450,452,454,456,457,459,460,462,464,466,468,469,470,472],{"type":286,"url":447},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":289,"url":449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22778",{"type":286,"url":451},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32319",{"type":286,"url":453},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F31987",{"type":286,"url":455},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22778.json",{"type":298,"url":299},{"type":286,"url":458},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.1",{"type":298,"url":199},{"type":286,"url":461},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-565.yaml",{"type":289,"url":463},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":286,"url":465},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2436113",{"type":286,"url":467},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22778",{"type":286,"url":316},{"type":286,"url":318},{"type":286,"url":471},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":286,"url":473},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",[253,246,259],{"id":96,"slug":476,"dossier":45,"summary":477,"aliases":478,"sourceIds":480,"published":481,"modified":482,"checkedAt":7,"severity":483,"references":489,"versionKeys":504,"packageCount":32,"repositoryCount":86},"ghsa-5jv2-g5wq-cmr4-b1c3983f","vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving",[479,186],"CVE-2026-53923",[96,186],"2026-06-17T14:03:11Z","2026-07-17T16:30:30.538194678Z",[484,486],{"type":282,"score":485},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":487,"score":488},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[490,492,494,496,498,500,502,503],{"type":286,"url":491},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":289,"url":493},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53923",{"type":286,"url":495},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44971",{"type":286,"url":497},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff219788f91952827132fa4fdf916427cd20d225e",{"type":289,"url":499},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":286,"url":501},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3403.yaml",{"type":298,"url":199},{"type":298,"url":299},[253,246,259],{"id":97,"slug":506,"dossier":45,"summary":507,"aliases":508,"sourceIds":510,"published":511,"modified":512,"checkedAt":7,"severity":513,"references":515,"versionKeys":534,"packageCount":32,"repositoryCount":86},"ghsa-69j4-grxj-j64p-ff78c10b","vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`",[509,170],"CVE-2025-62426",[97,170],"2025-11-20T21:26:24Z","2026-07-17T16:30:30.603743359Z",[514],{"type":282,"score":358},[516,518,520,522,524,526,528,529,531,533],{"type":286,"url":517},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":289,"url":519},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62426",{"type":286,"url":521},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27205",{"type":286,"url":523},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F3ada34f9cb4d1af763fdfa3b481862a93eb6bd2b",{"type":289,"url":525},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":286,"url":527},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2012.yaml",{"type":298,"url":199},{"type":286,"url":530},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fchat_utils.py#L1602-L1610",{"type":286,"url":532},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fserving_engine.py#L809-L814",{"type":298,"url":299},[253,246,259],{"id":98,"slug":536,"dossier":45,"summary":537,"aliases":538,"sourceIds":540,"published":541,"modified":542,"checkedAt":7,"severity":543,"references":548,"versionKeys":562,"packageCount":32,"repositoryCount":86},"ghsa-6c4r-fmh3-7rh8-a82d795c","vLLM: Processing differential in multi-channel audio downmixing enables hidden-input\u002Fmoderation bypass for audio models",[539,181],"CVE-2026-34760",[98,181],"2026-04-02T20:16:25.437Z","2026-07-17T17:00:52.155049383Z",[544,546],{"type":282,"score":545},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",{"type":282,"score":547},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[549,551,553,555,557,559,560],{"type":289,"url":550},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6c4r-fmh3-7rh8",{"type":289,"url":552},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34760",{"type":376,"url":554},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37058",{"type":361,"url":556},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fc7f98b4d0a63b32ed939e2b6dfaa8a626e9b46c4",{"type":286,"url":558},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2299.yaml",{"type":298,"url":199},{"type":289,"url":561},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.18.0",[253,246,259],{"id":99,"slug":564,"dossier":45,"summary":565,"aliases":566,"sourceIds":568,"published":569,"modified":570,"checkedAt":7,"severity":571,"references":573,"versionKeys":586,"packageCount":32,"repositoryCount":320},"ghsa-6fvq-23cw-5628-8eb01b7c","vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server",[567,171],"CVE-2025-61620",[99,171],"2025-10-07T21:35:22Z","2026-07-07T17:56:38.020494737Z",[572],{"type":282,"score":358},[574,576,578,580,581,582,584],{"type":286,"url":575},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":286,"url":577},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F25794",{"type":286,"url":579},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F7977e5027c2250a4abc1f474c5619c40b4e5682f",{"type":298,"url":199},{"type":298,"url":299},{"type":289,"url":583},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":289,"url":585},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61620",[253,259],{"id":100,"slug":588,"dossier":45,"summary":589,"aliases":590,"sourceIds":592,"published":593,"modified":594,"checkedAt":7,"severity":595,"references":597,"versionKeys":614,"packageCount":32,"repositoryCount":86},"ghsa-6pr9-rp53-2pmc-1471f1e7","vLLM: OOM Denial of Service via Audio Decompression Bomb",[591,187],"CVE-2026-54233",[100,187],"2026-06-17T14:06:22Z","2026-07-17T16:45:18.929893807Z",[596],{"type":282,"score":358},[598,600,602,604,606,608,610,611,613],{"type":286,"url":599},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":289,"url":601},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54233",{"type":286,"url":603},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44970",{"type":286,"url":605},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F1b1359c33269446f13c05da9a90c25174cbea590",{"type":289,"url":607},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":286,"url":609},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3404.yaml",{"type":298,"url":199},{"type":286,"url":612},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.23.1rc0",{"type":298,"url":299},[253,246,259],{"id":101,"slug":616,"dossier":45,"summary":617,"aliases":618,"sourceIds":620,"published":621,"modified":622,"checkedAt":7,"severity":623,"references":625,"versionKeys":640,"packageCount":32,"repositoryCount":32},"ghsa-6qc9-v4r8-22xg-0e64781f","vLLM DOS: Remotely kill vllm over http with invalid JSON schema",[619,165],"CVE-2025-48942",[101,165],"2025-05-28T19:41:53Z","2026-08-07T08:12:01.995568358Z",[624],{"type":282,"score":358},[626,629,631,633,635,637,639],{"type":627,"url":628},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6qc9-v4r8-22xg",{"type":289,"url":630},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48942",{"type":376,"url":632},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17248",{"type":376,"url":634},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17623",{"type":361,"url":636},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F08bf7840780980c7568c573c70a6a8db94fd45ff",{"type":286,"url":638},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-54.yaml",{"type":298,"url":199},[259],{"id":102,"slug":642,"dossier":45,"summary":643,"aliases":644,"sourceIds":646,"published":647,"modified":648,"checkedAt":7,"severity":649,"references":651,"versionKeys":689,"packageCount":32,"repositoryCount":320},"ghsa-7972-pg2x-xr59-8de5a611","vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out",[645,216],"CVE-2026-27893",[102,216],"2026-03-27T00:16:22.333Z","2026-07-17T16:30:29.029310389Z",[650],{"type":282,"score":283},[652,654,656,658,660,662,663,665,667,669,671,673,675,677,679,681,683,685,687],{"type":289,"url":653},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7972-pg2x-xr59",{"type":289,"url":655},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27893",{"type":376,"url":657},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F36192",{"type":361,"url":659},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F00bd08edeee5dd4d4c13277c0114a464011acf72",{"type":286,"url":661},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-27893.json",{"type":298,"url":199},{"type":286,"url":664},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2297.yaml",{"type":376,"url":666},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2452055",{"type":286,"url":668},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-27893",{"type":289,"url":670},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8748",{"type":289,"url":672},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8747",{"type":289,"url":674},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8746",{"type":289,"url":676},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":289,"url":678},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":289,"url":680},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19725",{"type":289,"url":682},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19724",{"type":289,"url":684},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10140",{"type":289,"url":686},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10141",{"type":289,"url":688},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",[253,246],{"id":103,"slug":691,"dossier":45,"summary":692,"aliases":693,"sourceIds":695,"published":696,"modified":697,"checkedAt":7,"severity":698,"references":703,"versionKeys":718,"packageCount":32,"repositoryCount":86},"ghsa-7h4p-rffg-7823-c840dc90","vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels",[694,188],"CVE-2026-54235",[103,188],"2026-06-17T14:02:22Z","2026-07-17T16:45:18.824754082Z",[699,701],{"type":282,"score":700},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":487,"score":702},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[704,706,708,710,712,714,716,717],{"type":286,"url":705},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":289,"url":707},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54235",{"type":286,"url":709},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45116",{"type":286,"url":711},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd598d239737cfa37bcfcb98886ec3f3557fc7198",{"type":289,"url":713},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":286,"url":715},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3405.yaml",{"type":298,"url":199},{"type":298,"url":299},[253,246,259],{"id":104,"slug":720,"dossier":45,"summary":721,"aliases":722,"sourceIds":724,"published":725,"modified":726,"checkedAt":7,"severity":727,"references":730,"versionKeys":745,"packageCount":32,"repositoryCount":86},"ghsa-8fr4-5q9j-m8gm-9a59ba60","vLLM vulnerable to remote code execution via transformers_utils\u002Fget_config",[723,172],"CVE-2025-66448",[104,172],"2025-12-02T17:34:16Z","2026-07-17T16:30:30.600907369Z",[728],{"type":282,"score":729},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[731,733,735,737,739,741,743,744],{"type":286,"url":732},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":289,"url":734},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66448",{"type":286,"url":736},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F28126",{"type":286,"url":738},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fffb08379d8870a1a81ba82b72797f196838d0c86",{"type":289,"url":740},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":286,"url":742},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2015.yaml",{"type":298,"url":199},{"type":298,"url":299},[253,246,259],{"id":105,"slug":747,"dossier":45,"summary":748,"aliases":749,"sourceIds":751,"published":752,"modified":753,"checkedAt":7,"severity":754,"references":757,"versionKeys":776,"packageCount":32,"repositoryCount":32},"ghsa-8jr5-v98p-w75m-be5fb565","vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations",[750,234],"CVE-2026-12491",[105,234],"2026-06-17T14:02:42Z","2026-07-17T16:45:18.723841391Z",[755],{"type":282,"score":756},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[758,760,762,764,766,768,770,772,774,775],{"type":286,"url":759},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":289,"url":761},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12491",{"type":286,"url":763},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44974",{"type":286,"url":765},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fcf1c90672404548aa3bc51f92c4745576a65ee26",{"type":286,"url":767},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-12491",{"type":286,"url":769},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2489786",{"type":289,"url":771},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":286,"url":773},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3406.yaml",{"type":298,"url":199},{"type":298,"url":299},[246],{"id":106,"slug":778,"dossier":45,"summary":779,"aliases":780,"sourceIds":782,"published":783,"modified":784,"checkedAt":7,"severity":785,"references":788,"versionKeys":817,"packageCount":32,"repositoryCount":86},"ghsa-94f4-hr76-p5j6-34e6691e","vLLM: OpenAI auth bypass",[781,179],"CVE-2026-48746",[106,179],"2026-06-16T17:36:41Z","2026-07-22T12:46:58.979336878Z",[786],{"type":282,"score":787},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[789,791,793,795,797,799,800,802,804,806,808,809,811,813,814,815],{"type":289,"url":790},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-94f4-hr76-p5j6",{"type":289,"url":792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48746",{"type":376,"url":794},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F43426",{"type":289,"url":796},"https:\u002F\u002Fx41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":286,"url":798},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48746.json",{"type":298,"url":199},{"type":286,"url":801},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-226.yaml",{"type":286,"url":803},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491581",{"type":286,"url":805},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48746",{"type":286,"url":807},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":286,"url":314},{"type":286,"url":810},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42142",{"type":286,"url":812},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42132",{"type":286,"url":372},{"type":286,"url":370},{"type":286,"url":816},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",[253,246,259],{"id":107,"slug":819,"dossier":45,"summary":820,"aliases":821,"sourceIds":823,"published":824,"modified":825,"checkedAt":7,"severity":826,"references":831,"versionKeys":850,"packageCount":32,"repositoryCount":86},"ghsa-98f3-hwg4-4rf7-af876537","vllm has Improper Resource Shutdown or Release",[822,189],"CVE-2026-9540",[107,189],"2026-05-26T15:32:10Z","2026-07-13T16:43:04.792575152Z",[827,829],{"type":282,"score":828},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":487,"score":830},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[832,834,836,838,839,841,843,845,847,848],{"type":289,"url":833},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9540",{"type":286,"url":835},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F37343",{"type":286,"url":837},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37594",{"type":298,"url":199},{"type":286,"url":840},"https:\u002F\u002Fingero.io\u002Fdebugging-vllm-latency-minimax-ollama-mcp",{"type":286,"url":842},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F814645",{"type":286,"url":844},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601",{"type":286,"url":846},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601\u002Fcti",{"type":298,"url":299},{"type":289,"url":849},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-98f3-hwg4-4rf7",[253,246,259],{"id":108,"slug":852,"dossier":45,"summary":853,"aliases":854,"sourceIds":856,"published":857,"modified":858,"checkedAt":7,"severity":859,"references":861,"versionKeys":873,"packageCount":32,"repositoryCount":32},"ghsa-9hcf-v7m4-6m2j-d85c17a2","vLLM allows clients to crash the openai server with invalid regex",[855,166],"CVE-2025-48943",[108,166],"2025-05-28T19:42:12Z","2026-08-07T08:12:07.476205432Z",[860],{"type":282,"score":358},[862,864,866,868,869,870,872],{"type":289,"url":863},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9hcf-v7m4-6m2j",{"type":289,"url":865},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48943",{"type":376,"url":867},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17313",{"type":376,"url":634},{"type":361,"url":636},{"type":286,"url":871},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-55.yaml",{"type":298,"url":199},[259],{"id":109,"slug":875,"dossier":45,"summary":876,"aliases":877,"sourceIds":879,"published":880,"modified":881,"checkedAt":7,"severity":882,"references":885,"versionKeys":900,"packageCount":32,"repositoryCount":32},"ghsa-9pcc-gvx5-r5wm-4c73fdb6","Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration",[878,173],"CVE-2025-30165",[109,173],"2025-05-06T16:38:35Z","2026-08-07T08:12:19.063707308Z",[883],{"type":282,"score":884},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[886,888,890,892,894,895,897,899],{"type":286,"url":887},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":289,"url":889},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30165",{"type":289,"url":891},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":286,"url":893},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2017.yaml",{"type":298,"url":199},{"type":286,"url":896},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L295-L301",{"type":286,"url":898},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L468-L470",{"type":298,"url":299},[259],{"id":110,"slug":902,"dossier":45,"summary":903,"aliases":904,"sourceIds":906,"published":907,"modified":908,"checkedAt":7,"severity":909,"references":912,"versionKeys":924,"packageCount":32,"repositoryCount":32},"ghsa-c65p-x677-fgj6-db33633a","vLLM has a Weakness in MultiModalHasher Image Hashing Implementation",[905,162],"CVE-2025-46722",[110,162],"2025-05-28T18:03:41Z","2026-08-07T08:12:03.917531780Z",[910],{"type":282,"score":911},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[913,915,917,919,921,923],{"type":289,"url":914},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-c65p-x677-fgj6",{"type":289,"url":916},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46722",{"type":286,"url":918},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17378",{"type":361,"url":920},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F99404f53c72965b41558aceb1bc2380875f5d848",{"type":286,"url":922},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-43.yaml",{"type":298,"url":199},[259],{"id":111,"slug":926,"dossier":45,"summary":927,"aliases":928,"sourceIds":930,"published":931,"modified":932,"checkedAt":7,"severity":933,"references":937,"versionKeys":949,"packageCount":32,"repositoryCount":86},"ghsa-grg2-63fw-f2qr-b9670d50","vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions",[929,167],"CVE-2026-22773",[111,167],"2026-01-10T07:16:03.527Z","2026-06-08T20:00:15.842086505Z",[934,935],{"type":282,"score":358},{"type":282,"score":936},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[938,940,942,944,946,948],{"type":627,"url":939},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-grg2-63fw-f2qr",{"type":289,"url":941},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22773",{"type":286,"url":943},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F29881",{"type":286,"url":945},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F0ec84221718d920c3f46da879cc354f94b8fb59e",{"type":286,"url":947},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-143.yaml",{"type":298,"url":199},[253,246,259],{"id":112,"slug":951,"dossier":45,"summary":952,"aliases":953,"sourceIds":955,"published":956,"modified":957,"checkedAt":7,"severity":958,"references":961,"versionKeys":976,"packageCount":32,"repositoryCount":86},"ghsa-hgg8-fqqc-vfmw-ba9b1162","vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router",[954,190],"CVE-2026-54236",[112,190],"2026-06-17T14:04:09Z","2026-07-20T13:45:32.249353382Z",[959],{"type":282,"score":960},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[962,964,966,968,970,972,974,975],{"type":286,"url":963},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":289,"url":965},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54236",{"type":286,"url":967},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45119",{"type":286,"url":969},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F94923629729381d7f7c9efde72071a2441f7fd82",{"type":289,"url":971},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":286,"url":973},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3408.yaml",{"type":298,"url":199},{"type":298,"url":299},[253,246,259],{"id":113,"slug":978,"dossier":45,"summary":979,"aliases":980,"sourceIds":982,"published":983,"modified":984,"checkedAt":7,"severity":985,"references":987,"versionKeys":1000,"packageCount":32,"repositoryCount":86},"ghsa-hpv8-x276-m59f-6a62e8b6","vLLM Vulnerable to Remote DoS via Special-Token Placeholders",[981,191],"CVE-2026-44222",[113,191],"2026-05-05T22:21:41Z","2026-07-17T16:30:29.072224452Z",[986],{"type":282,"score":358},[988,990,992,994,996,998,999],{"type":286,"url":989},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":289,"url":991},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44222",{"type":286,"url":993},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F32656",{"type":289,"url":995},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":286,"url":997},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3409.yaml",{"type":298,"url":199},{"type":298,"url":299},[253,246,259],{"id":114,"slug":1002,"dossier":45,"summary":1003,"aliases":1004,"sourceIds":1006,"published":1007,"modified":1008,"checkedAt":7,"severity":1009,"references":1012,"versionKeys":1020,"packageCount":32,"repositoryCount":32},"ghsa-j828-28rj-hfhp-e66dafb9","vLLM vulnerable to Regular Expression Denial of Service",[1005],"CVE-2025-71379",[114],"2025-05-28T17:50:06Z","2026-08-07T08:12:15.960396520Z",[1010],{"type":282,"score":1011},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1013,1015,1017,1019],{"type":286,"url":1014},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-j828-28rj-hfhp",{"type":286,"url":1016},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F18454",{"type":286,"url":1018},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F4fc1bf813ad80172c1db31264beaef7d93fe0601",{"type":298,"url":199},[259],{"id":115,"slug":1022,"dossier":45,"summary":1023,"aliases":1024,"sourceIds":1026,"published":1027,"modified":1028,"checkedAt":7,"severity":1029,"references":1033,"versionKeys":1041,"packageCount":32,"repositoryCount":32},"ghsa-mcmc-2m55-j8jj-ea2fc7d3","vLLM introduced enhanced protection for CVE-2025-62164",[1025,233],"CVE-2026-56340",[115,233],"2026-01-08T21:47:43Z","2026-06-27T11:26:32.894007747Z",[1030,1032],{"type":282,"score":1031},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":282,"score":936},[1034,1036,1038,1039],{"type":289,"url":1035},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mcmc-2m55-j8jj",{"type":286,"url":1037},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F30649",{"type":298,"url":199},{"type":289,"url":1040},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fvllm-denial-of-service-via-unvalidated-multimodal-embeddings",[246],{"id":116,"slug":1043,"dossier":45,"summary":1044,"aliases":1045,"sourceIds":1047,"published":1048,"modified":1049,"checkedAt":7,"severity":1050,"references":1052,"versionKeys":1067,"packageCount":32,"repositoryCount":32},"ghsa-mrw7-hf4f-83pf-125f2ed3","vLLM deserialization vulnerability leading to DoS and potential RCE",[1046,232],"CVE-2025-62164",[116,232],"2025-11-20T20:59:34Z","2026-07-17T16:30:30.638326686Z",[1051],{"type":282,"score":1031},[1053,1055,1057,1059,1061,1063,1065,1066],{"type":286,"url":1054},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":289,"url":1056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62164",{"type":286,"url":1058},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27204",{"type":286,"url":1060},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58fab50d82838d5014f4a14d991fdb9352c9c84b",{"type":289,"url":1062},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":286,"url":1064},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2018.yaml",{"type":298,"url":199},{"type":298,"url":299},[246],{"id":117,"slug":1069,"dossier":45,"summary":1070,"aliases":1071,"sourceIds":1073,"published":1074,"modified":1075,"checkedAt":7,"severity":1076,"references":1080,"versionKeys":1095,"packageCount":32,"repositoryCount":86},"ghsa-pmqf-x6x8-p7qw-b2778e4b","vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs",[1072,174],"CVE-2025-62372",[117,174],"2025-11-20T21:23:29Z","2026-07-17T16:30:32.010515304Z",[1077,1078],{"type":282,"score":358},{"type":487,"score":1079},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1081,1083,1085,1086,1088,1089,1091,1093,1094],{"type":286,"url":1082},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":289,"url":1084},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62372",{"type":286,"url":1058},{"type":286,"url":1087},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F6613",{"type":286,"url":1060},{"type":289,"url":1090},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":286,"url":1092},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2019.yaml",{"type":298,"url":199},{"type":298,"url":299},[253,246,259],{"id":118,"slug":1097,"dossier":45,"summary":1098,"aliases":1099,"sourceIds":1101,"published":1102,"modified":1103,"checkedAt":7,"severity":1104,"references":1106,"versionKeys":1126,"packageCount":32,"repositoryCount":86},"ghsa-pq5c-rjhq-qp7p-741b6a4f","vLLM: Denial of Service via Unbounded Frame Count in video\u002Fjpeg Base64 Processing",[1100,168],"CVE-2026-34755",[118,168],"2026-04-03T21:51:35Z","2026-07-17T16:30:29.016474105Z",[1105],{"type":282,"score":358},[1107,1109,1111,1113,1115,1116,1117,1119,1121,1123,1124],{"type":361,"url":1108},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5c-rjhq-qp7p",{"type":289,"url":1110},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34755",{"type":286,"url":1112},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F38636",{"type":286,"url":1114},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58ee61422169ce17e08248f8efa1e9df434fe395",{"type":286,"url":370},{"type":286,"url":372},{"type":286,"url":1118},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34755",{"type":286,"url":1120},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455403",{"type":286,"url":1122},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-144.yaml",{"type":298,"url":199},{"type":286,"url":1125},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34755.json",[253,246,259],{"id":119,"slug":1128,"dossier":45,"summary":1129,"aliases":1130,"sourceIds":1132,"published":1133,"modified":1134,"checkedAt":7,"severity":1135,"references":1138,"versionKeys":1158,"packageCount":32,"repositoryCount":86},"ghsa-q8gq-377p-jq3r-b6095d17","vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution",[1131,182],"CVE-2026-41523",[119,182],"2026-06-16T17:34:49Z","2026-07-17T16:30:30.544440776Z",[1136],{"type":282,"score":1137},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1139,1141,1143,1145,1146,1147,1149,1151,1153,1154,1156],{"type":627,"url":1140},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-q8gq-377p-jq3r",{"type":289,"url":1142},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41523",{"type":361,"url":1144},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb3c7ffcab82c2439726f8cb213800f6f38c023d3",{"type":289,"url":370},{"type":289,"url":372},{"type":286,"url":1148},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-41523",{"type":376,"url":1150},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491582",{"type":286,"url":1152},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2300.yaml",{"type":298,"url":199},{"type":289,"url":1155},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdcb05b04-e625-41e7-adbc-bbae0cc2d64c",{"type":286,"url":1157},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-41523.json",[253,246,259],{"id":120,"slug":1160,"dossier":45,"summary":1161,"aliases":1162,"sourceIds":1164,"published":1165,"modified":1166,"checkedAt":7,"severity":1167,"references":1170,"versionKeys":1196,"packageCount":32,"repositoryCount":86},"ghsa-qh4c-xf7m-gxfc-81424acf","vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector",[1163,175],"CVE-2026-24779",[120,175],"2026-01-28T16:14:28Z","2026-07-21T12:46:28.194413173Z",[1168],{"type":282,"score":1169},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[1171,1173,1175,1177,1179,1181,1182,1183,1185,1187,1189,1191,1192,1193,1194,1195],{"type":286,"url":1172},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":289,"url":1174},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24779",{"type":286,"url":1176},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32746",{"type":286,"url":1178},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff46d576c54fb8aeec5fc70560e850bed38ef17d7",{"type":286,"url":1180},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24779.json",{"type":298,"url":299},{"type":298,"url":199},{"type":286,"url":1184},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2020.yaml",{"type":289,"url":1186},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":286,"url":1188},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433624",{"type":286,"url":1190},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24779",{"type":286,"url":314},{"type":286,"url":316},{"type":286,"url":471},{"type":286,"url":473},{"type":286,"url":816},[253,246,259],{"id":121,"slug":1198,"dossier":45,"summary":1199,"aliases":1200,"sourceIds":1202,"published":1203,"modified":1204,"checkedAt":7,"severity":1205,"references":1209,"versionKeys":1221,"packageCount":32,"repositoryCount":86},"ghsa-rwxx-mrjm-wc2m-e234c364","vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends",[1201,184],"CVE-2026-55574",[121,184],"2026-07-06T21:16:57.347Z","2026-07-17T17:15:51.409816079Z",[1206,1207],{"type":282,"score":936},{"type":487,"score":1208},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1210,1212,1214,1216,1218,1220],{"type":289,"url":1211},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rwxx-mrjm-wc2m",{"type":289,"url":1213},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55574",{"type":361,"url":1215},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45118",{"type":361,"url":1217},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F2b3006076c5e9bc4cda9e03e3641388de3c5c286",{"type":286,"url":1219},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2304.yaml",{"type":298,"url":199},[253,246,259],{"id":122,"slug":1223,"dossier":45,"summary":1224,"aliases":1225,"sourceIds":1227,"published":1228,"modified":1229,"checkedAt":7,"severity":1230,"references":1232,"versionKeys":1247,"packageCount":32,"repositoryCount":32},"ghsa-rxc4-3w6r-4v47-0c8c9269","vllm API endpoints vulnerable to Denial of Service Attacks",[1226,176],"CVE-2025-48956",[122,176],"2025-08-21T14:24:16Z","2026-07-17T16:30:30.538696375Z",[1231],{"type":282,"score":936},[1233,1235,1237,1239,1241,1243,1245,1246],{"type":286,"url":1234},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":289,"url":1236},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48956",{"type":286,"url":1238},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F23267",{"type":286,"url":1240},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd8b736f913a59117803d6701521d2e4861701944",{"type":289,"url":1242},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":286,"url":1244},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2021.yaml",{"type":298,"url":199},{"type":298,"url":299},[259],{"id":123,"slug":1249,"dossier":45,"summary":1250,"aliases":1251,"sourceIds":1253,"published":1254,"modified":1255,"checkedAt":7,"severity":1256,"references":1258,"versionKeys":1270,"packageCount":32,"repositoryCount":32},"ghsa-vrq3-r879-7m65-0fc59d0f","vLLM Tool Schema allows DoS via Malformed pattern and type Fields",[1252,177],"CVE-2025-48944",[123,177],"2025-05-28T19:42:32Z","2026-08-07T08:12:14.152190792Z",[1257],{"type":282,"score":358},[1259,1261,1263,1264,1266,1268,1269],{"type":286,"url":1260},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":289,"url":1262},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48944",{"type":286,"url":634},{"type":289,"url":1265},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":286,"url":1267},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2023.yaml",{"type":298,"url":199},{"type":298,"url":299},[259],{"id":124,"slug":1272,"dossier":45,"summary":1273,"aliases":1274,"sourceIds":1276,"published":1277,"modified":1278,"checkedAt":7,"severity":1279,"references":1281,"versionKeys":1293,"packageCount":32,"repositoryCount":32},"ghsa-w6q7-j642-7c25-391074f5","vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`",[1275,163],"CVE-2025-48887",[124,163],"2025-05-28T17:49:33Z","2026-08-07T08:12:04.723988051Z",[1280],{"type":282,"score":358},[1282,1284,1286,1287,1288,1290,1291],{"type":627,"url":1283},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",{"type":289,"url":1285},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48887",{"type":376,"url":1016},{"type":361,"url":1018},{"type":286,"url":1289},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-50.yaml",{"type":298,"url":199},{"type":289,"url":1292},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",[259],{"id":125,"slug":1295,"dossier":45,"summary":1296,"aliases":1297,"sourceIds":1299,"published":1300,"modified":1301,"checkedAt":7,"severity":1302,"references":1304,"versionKeys":1321,"packageCount":32,"repositoryCount":320},"ghsa-wr9h-g72x-mwhm-9f241db1","vLLM is vulnerable to timing attack at bearer auth",[1298,178],"CVE-2025-59425",[125,178],"2025-10-07T17:24:47Z","2026-07-17T16:30:30.606191061Z",[1303],{"type":282,"score":485},[1305,1307,1309,1311,1313,1315,1316,1318,1320],{"type":286,"url":1306},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":289,"url":1308},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59425",{"type":286,"url":1310},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fee10d7e6ff5875386c7f136ce8b5f525c8fcef48",{"type":289,"url":1312},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":286,"url":1314},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2026.yaml",{"type":298,"url":199},{"type":286,"url":1317},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F4b946d693e0af15740e9ca9c0e059d5f333b1083\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fapi_server.py#L1270-L1274",{"type":286,"url":1319},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.11.0",{"type":298,"url":299},[253,259],{"id":126,"slug":1323,"dossier":45,"summary":1324,"aliases":1325,"sourceIds":1327,"published":1328,"modified":1329,"checkedAt":7,"severity":1330,"references":1337,"versionKeys":1356,"packageCount":32,"repositoryCount":86},"ghsa-x368-4g9h-fvv4-37873c2f","vLLM makes Use of Uninitialized Resource",[1326,185],"CVE-2026-7141",[126,185],"2026-04-27T17:16:45.637Z","2026-07-13T16:45:11.279169812Z",[1331,1333,1335],{"type":282,"score":1332},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":487,"score":1334},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":487,"score":1336},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1338,1340,1342,1344,1346,1348,1350,1352,1354],{"type":289,"url":1339},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-7141",{"type":376,"url":1341},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146",{"type":376,"url":1343},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146#issue-4215090365",{"type":361,"url":1345},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F39283",{"type":361,"url":1347},"https:\u002F\u002Fgithub.com\u002FAjAnubolu\u002Fvllm\u002Fcommit\u002F1ad67864c0c20f167929e64c875f5c28e1aad9fd",{"type":289,"url":1349},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F801297",{"type":289,"url":1351},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740",{"type":376,"url":1353},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740\u002Fcti",{"type":289,"url":1355},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x368-4g9h-fvv4",[253,246,259],{"id":127,"slug":1358,"dossier":45,"summary":85,"aliases":1359,"sourceIds":1362,"published":1363,"modified":1364,"checkedAt":7,"severity":1365,"references":1367,"versionKeys":1370,"packageCount":32,"repositoryCount":86},"pysec-2026-227-5f5a1d28",[1360,1361],"CVE-2026-54232","GHSA-jrf6-vqxq-pjv2",[127],"2026-06-22T23:16:30.873Z","2026-06-26T00:00:06.054142968Z",[1366],{"type":282,"score":283},[1368],{"type":627,"url":1369},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-jrf6-vqxq-pjv2",[253,246,259],{"id":128,"slug":1372,"dossier":45,"summary":85,"aliases":1373,"sourceIds":1375,"published":1376,"modified":1377,"checkedAt":7,"severity":1378,"references":1380,"versionKeys":1390,"packageCount":32,"repositoryCount":86},"pysec-2026-2302-60c0b148",[1374],"CVE-2026-5497",[128],"2026-06-11T10:16:21.903Z","2026-07-13T07:15:46.584903724Z",[1379],{"type":282,"score":936},[1381,1383,1385,1387,1388],{"type":286,"url":1382},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5497",{"type":286,"url":1384},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5497.json",{"type":376,"url":1386},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2487813",{"type":361,"url":1114},{"type":627,"url":1389},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F7bd92629-b396-4449-8f88-6c0092530eb4",[253,246,259],1786593603326]