Search for packages
| purl | pkg:pypi/vllm@0.31.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-4319
Aliases: CVE-2026-105922 |
A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file … |
Vulnerable |
|
GHSA-3cgq-c484-rx5j
|
Duplicate Advisory: vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs ## Duplicate Advisory This advisory has been withdrawn because it … | There are no reported fixed by versions. |
|
GHSA-frvg-qw88-hww9
Aliases: CVE-2026-94624 |
vllm p2p never connected zmq_exhaustion ### Summary When the `OffloadingConnector` uses `TieringOffloadingSpec` with a P2P secondary tier, an API client … |
Vulnerable |
|
GHSA-h3rc-j82p-2c3h
Aliases: CVE-2026-115915 |
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE ### Summary In vLLM 0.30.0, `ImageMediaIO` passes attacker-controlled … |
Vulnerable |
|
GHSA-8397-8qf6-f2gm
Aliases: CVE-2026-115913 |
vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine ### … |
Vulnerable |
|
GHSA-gq5q-89c7-vhvx
Aliases: CVE-2026-115914 |
vLLM DeepSeek-OCR image processing vulnerable to denial of service ## Summary Any vLLM deployment serving a model of the DeepSeek-OCR … |
Vulnerable |
|
PYSEC-2026-4347
Aliases: CVE-2026-115916 GHSA-q97c-p368-75c4 |
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_token_id with an off-by-one … |
Vulnerable |
|
PYSEC-2026-4349
Aliases: CVE-2026-115918 GHSA-x567-49g5-p4cf |
vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an … |
Vulnerable |
|
PYSEC-2026-4348
Aliases: CVE-2026-115917 GHSA-vvpg-rrww-wpmh |
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configures Starlette CORSMiddleware … |
Vulnerable |
|
PYSEC-2026-4345
Aliases: CVE-2026-115912 GHSA-6757-hggm-hp2w |
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place forged … |
Vulnerable |
|
PYSEC-2026-4346
Aliases: CVE-2026-115915 GHSA-h3rc-j82p-2c3h |
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled image bytes to … |
Vulnerable |
|
PYSEC-2026-4344
Aliases: CVE-2026-115911 GHSA-542m-9234-8gvf |
vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can supply a … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-p92p-rxj5-7p2x
|
vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine ## Summary Multimodal … |
CVE-2026-114050
|
|
GHSA-gx7p-2j49-hfq4
|
vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.) ## Summary API clients can supply … |
CVE-2026-114055
|
|
GHSA-h3rc-6mm3-gc2m
|
vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution ## Summary An untrusted multimodal request can set `mm_processor_kwargs.code_revision`. When vLLM serves a … |
CVE-2026-114053
|
|
GHSA-f623-hjm8-5wg5
|
Duplicate Advisory: vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution ## Duplicate Advisory This advisory has been withdrawn because it is … | |
|
PYSEC-2026-4362
|
vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled … |
CVE-2026-114054
GHSA-rh6f-3x46-j33q |
|
PYSEC-2026-4361
|
vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a processor for … |
CVE-2026-114052
GHSA-823j-m4cj-hmjf |