Vulnerabilities in vllm-project
125 resultsCVE-2026-93989LOWvLLM through 0.29.0 Cross-Request Logits Corruption via bad_wordsEPSS 0.2%CVE-2026-105755MEDIUMvLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`EPSS 0.2%CVE-2026-90554MEDIUMvLLM before 0.28.0 Denial of Service via audio extractionEPSS 0.2%CVE-2025-25183LOWvLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cacheEPSS 0.2%CVE-2026-90713MEDIUMvllm-project vLLM tiktoken vocab File mod.rs new denial of serviceEPSS 0.2%