Vulnerabilidades en vllm-project
125 resultadosCVE-2026-44223MEDIUMvLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parametersEPSS 0.4%CVE-2026-100648MEDIUMvllm before 0.29.0 Uncontrolled Resource Consumption via Audio DecodingEPSS 0.4%CVE-2026-115918MEDIUMvLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargsEPSS 0.4%CVE-2026-100647MEDIUMvLLM before 0.29.0 CPU Exhaustion via unbounded cache_saltEPSS 0.3%CVE-2026-100649MEDIUMvLLM before 0.29.0 Resource Limit Bypass via Sampler SubclassEPSS 0.3%CVE-2026-100653HIGHvLLM 0.22.1 before 0.28.0 Incomplete Artifact Pin PropagationEPSS 0.3%CVE-2026-116173HIGHvLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_idsEPSS 0.3%CVE-2026-116172HIGHvLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_nEPSS 0.3%CVE-2025-46722MEDIUMvLLM has a Weakness in MultiModalHasher Image Hashing ImplementationEPSS 0.3%CVE-2026-105756MEDIUMvLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of serviceEPSS 0.3%CVE-2026-116178HIGHvLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholdersEPSS 0.3%CVE-2026-115913MEDIUMvLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engineEPSS 0.3%CVE-2026-116179HIGHvLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames OverrideEPSS 0.3%CVE-2026-116176HIGHvLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnectorEPSS 0.3%CVE-2026-116175HIGHvLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat CompletionsEPSS 0.3%CVE-2026-100654HIGHvLLM before 0.29.0 Denial of Service via out-of-range stop_token_idsEPSS 0.3%CVE-2026-105757MEDIUMvLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)EPSS 0.3%CVE-2026-115911MEDIUMvLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread poolEPSS 0.3%CVE-2026-115916MEDIUMvLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)EPSS 0.3%CVE-2026-105922MEDIUMvllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of serviceEPSS 0.3%