Start for Free
pypi

vllm

View on pypi registry
100 Total advisories
100 Vulnerabilities
0 Malware

Dependency scanning

Check whether vllm is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

UNKNOWN
PyPI

CVE-2026-114054

CVE-2026-114054
UNKNOWN
PyPI

CVE-2026-114052

CVE-2026-114052
LOW 3.4
PyPI

CVE-2026-115917

vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server
HIGH 8.1
PyPI

CVE-2026-115915

vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE
HIGH 7.5
PyPI

CVE-2026-115912

vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled
MEDIUM 6.5
PyPI

CVE-2026-115918

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs
MEDIUM 6.5
PyPI

CVE-2026-115916

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)
MEDIUM 6.5
PyPI

CVE-2026-115911

vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool
MEDIUM 4.7
PyPI

CVE-2026-115917

CVE-2026-115917
HIGH 8.2
PyPI

CVE-2026-116176

CVE-2026-116176
HIGH 7.5
PyPI

CVE-2026-116177

CVE-2026-116177
HIGH 7.5
PyPI

CVE-2026-116173

CVE-2026-116173
MEDIUM 6.5
PyPI

CVE-2026-115916

CVE-2026-115916
MEDIUM 6.5
PyPI

CVE-2026-115911

CVE-2026-115911
HIGH 7.5
PyPI

CVE-2026-116178

CVE-2026-116178
CRITICAL 9.8
PyPI

CVE-2026-115915

CVE-2026-115915
MEDIUM 6.5
PyPI

CVE-2026-115918

CVE-2026-115918
HIGH 8.8
PyPI

CVE-2026-115912

CVE-2026-115912
MEDIUM 6.5
PyPI

CVE-2026-115914

vLLM DeepSeek-OCR image processing vulnerable to denial of service
MEDIUM 6.5
PyPI

CVE-2026-115913

vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine
HIGH 8.1
PyPI

CVE-2026-114053

vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
HIGH 8.1
PyPI

GHSA-f623-hjm8-5wg5

Duplicate Advisory: vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
UNKNOWN
PyPI

CVE-2026-94624

CVE-2026-94624
MEDIUM 6.5
PyPI

CVE-2026-94624

vllm p2p never connected zmq_exhaustion
HIGH 7.5
PyPI

GHSA-8qpc-6rxx-4pxf

Duplicate Advisory: vllm p2p never connected zmq_exhaustion
HIGH 7.5
PyPI

CVE-2026-114055

vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)
HIGH 7.5
PyPI

GHSA-3cgq-c484-rx5j

Duplicate Advisory: vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs
MEDIUM 6.5
PyPI

CVE-2026-114050

vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine
HIGH 7.5
PyPI

GHSA-hfwf-hgvp-4rr8

Duplicate Advisory: vLLM vulnerable to remote denial of service through forged multimodal UUID cache desynchronization
HIGH 7.5
PyPI

CVE-2026-105759

CVE-2026-105759
UNKNOWN
PyPI

CVE-2026-100653

CVE-2026-100653
UNKNOWN
PyPI

CVE-2026-105922

CVE-2026-105922
MEDIUM 6.5
PyPI

CVE-2026-105754

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
MEDIUM 5.3
PyPI

CVE-2026-105760

vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion
MEDIUM 6.5
PyPI

CVE-2026-105756

vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service
LOW 3.1
PyPI

CVE-2026-105752

vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle
MEDIUM 5.3
PyPI

CVE-2026-105758

vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach
MEDIUM 6.5
PyPI

CVE-2026-105756

vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service
MEDIUM 5.3
PyPI

CVE-2026-105760

vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion
LOW 3.1
PyPI

CVE-2026-105752

vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle
MEDIUM 6.5
PyPI

CVE-2026-105754

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
MEDIUM 5.3
PyPI

CVE-2026-105758

vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach
MEDIUM 6.5
PyPI

CVE-2026-105757

vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)
MEDIUM 6.5
PyPI

CVE-2026-105753

vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core
MEDIUM 4.2
PyPI

CVE-2026-105755

vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`
MEDIUM 4.2
PyPI

CVE-2026-105755

CVE-2026-105755
MEDIUM 6.5
PyPI

CVE-2026-105753

CVE-2026-105753
MEDIUM 6.5
PyPI

CVE-2026-105757

CVE-2026-105757
UNKNOWN
PyPI

CVE-2026-100650

CVE-2026-100650
HIGH 7.5
PyPI

CVE-2026-103241

CVE-2026-103241
HIGH 7.5
PyPI

CVE-2026-100652

CVE-2026-100652
MEDIUM 6.5
PyPI

CVE-2026-57173

vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions
MEDIUM 6.5
PyPI

CVE-2026-69147

vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation
MEDIUM 6.5
PyPI

CVE-2026-69147

vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation
MEDIUM 6.5
PyPI

CVE-2026-57173

vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions
UNKNOWN
PyPI

CVE-2026-78684

CVE-2026-78684
UNKNOWN
PyPI

CVE-2026-94625

CVE-2026-94625
UNKNOWN
PyPI

CVE-2026-94623

CVE-2026-94623
UNKNOWN
PyPI

CVE-2026-94622

CVE-2026-94622
UNKNOWN
PyPI

CVE-2026-94626

CVE-2026-94626
MEDIUM 5.3
PyPI

CVE-2026-93840

CVE-2026-93840
UNKNOWN
PyPI

CVE-2026-93592

CVE-2026-93592
MEDIUM 5.3
PyPI

CVE-2026-93841

CVE-2026-93841
MEDIUM 4.3
PyPI

CVE-2026-93989

CVE-2026-93989
UNKNOWN
PyPI

CVE-2026-93436

CVE-2026-93436
UNKNOWN
PyPI

CVE-2026-90553

CVE-2026-90553
HIGH 8.8
PyPI

GHSA-78fp-cf4h-g36p

Duplicate Advisory: vLLM introduced enhanced protection for CVE-2025-62164
HIGH 8.8
PyPI

CVE-2026-56340

vLLM introduced enhanced protection for CVE-2025-62164
MEDIUM 4.3
PyPI

GHSA-vfm7-4h43-gp6m

Duplicate Advisory: vLLM Vulnerable to Regular Expression Denial of Service
MEDIUM 4.3
PyPI

CVE-2026-71486

vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
MEDIUM 5.3
PyPI

CVE-2026-73555

vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
UNKNOWN
PyPI

CVE-2026-73557

vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
MEDIUM 5.3
PyPI

CVE-2026-73556

vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m
MEDIUM 5.3
PyPI

CVE-2026-73558

vLLM: Cross-User Data Leak Vulnerability
MEDIUM 6.5
PyPI

CVE-2026-73560

vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections
MEDIUM 4.3
PyPI

CVE-2026-71486

vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
MEDIUM 5.3
PyPI

CVE-2026-73558

vLLM: Cross-User Data Leak Vulnerability
MEDIUM 6.5
PyPI

CVE-2026-73560

vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections
MEDIUM 5.3
PyPI

CVE-2026-73555

vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
MEDIUM 5.3
PyPI

CVE-2026-73556

vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m
UNKNOWN
PyPI

CVE-2026-73557

vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
HIGH 7.5
PyPI

CVE-2026-55574

vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
HIGH 7.5
PyPI

CVE-2026-54234

vLLM has Remote DoS via Invalid Recovered Token Reinjection
MEDIUM 4.8
PyPI

CVE-2026-12491

vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations
MEDIUM 6.5
PyPI

CVE-2026-54233

vLLM: OOM Denial of Service via Audio Decompression Bomb
HIGH 7.5
PyPI

CVE-2026-53923

vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving
MEDIUM 6.5
PyPI

CVE-2026-44222

vLLM Vulnerable to Remote DoS via Special-Token Placeholders
MEDIUM 5.6
PyPI

CVE-2026-7141

vLLM makes Use of Uninitialized Resource
MEDIUM 6.5
PyPI

CVE-2026-34755

vLLM: Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing
MEDIUM 5.4
PyPI

CVE-2026-34753

vLLM: Server-Side Request Forgery (SSRF) in `download_bytes_from_url `
HIGH 8.8
PyPI

CVE-2025-62164

vLLM deserialization vulnerability leading to DoS and potential RCE
MEDIUM 6.5
PyPI

CVE-2025-62372

vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs
MEDIUM 6.5
PyPI

CVE-2026-47155

vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors
MEDIUM 6.5
PyPI

CVE-2026-73559

vLLM: Completion prompt lists fan out into unbounded engine requests
UNKNOWN
PyPI

CVE-2026-55514

vLLM denial of service via prompt embeds on M-RoPE models
HIGH 7.5
PyPI

CVE-2026-41523

vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution
MEDIUM 5.3
PyPI

CVE-2026-54236

vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router
CRITICAL 9.1
PyPI

CVE-2026-48746

vLLM: OpenAI auth bypass
MEDIUM 6.5
PyPI

CVE-2026-54235

vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels
MEDIUM 6.5
PyPI

CVE-2026-44223

vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters

Browse more PyPI advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes