python-vllm

pyproject Advisory 38 DepMismatch 12 DepChanges 23

A high-throughput and memory-efficient inference and serving engine for LLMs

Current: 0.27.1
Candidate: 0.33.0

License: Apache-2.0

Build

Target	Result	Last successful version	Succeeded at
rva23python-vllm	Succeeded	0.27.1	2026-10-11 03:22:46 UTC
rva23python-vllm:rocm	Succeeded	0.27.1	2026-10-11 22:04:52 UTC
rva20python-vllm	Succeeded	0.27.1	2026-10-12 10:42:47 UTC
rva20python-vllm:rocm	Succeeded	0.27.1	2026-10-12 19:58:03 UTC
x86_64python-vllm	Succeeded	0.27.1	2026-10-08 08:18:29 UTC
x86_64python-vllm:rocm	Succeeded	0.27.1	2026-10-08 09:14:15 UTC

RuntimeDeps

Dependency	Observed source	Current requirement	Candidate requirement
aiohttp	3.14.5	>=3.13.3✓	>=3.14.4✓
anthropic	0.105.2	>=0.71.0✓	>=0.71.0✓
apache-tvm-ffi	0.1.10	==0.1.11✗	==0.1.11✗
blake3	1.0.8	any version✓	any version✓
cachetools	7.1.1	any version✓	any version✓
cbor2	6.1.2	any version✓	any version✓
certifi	2026.10.19	Not observed	>=2026.10.19✓
cloudpickle	3.1.2	any version✓	any version✓
compressed-tensors	0.15.0.1	==0.17.0✗	==0.17.0✗
depyf	0.20.0	==0.20.0✓	==0.20.0✓
einops	0.8.2	any version✓	any version✓
fastapi[standard]	0.136.1	<0.137.0,>=0.133.0?	<0.137.0,>=0.133.0?
fastsafetensorsUnmapped	—	>=0.3.2	>=0.3.3
filelock	3.29.0	>=3.16.1✓	>=3.20.3✓
flashinfer-pythonUnmapped	—	==0.6.16.post3	==0.7.2.post1
huggingface_hub	1.16.0	Not observed	>=1.31.0✗
humming-kernels[cu13]Unmapped	—	==0.1.10	==0.1.19
ijson	3.5.0	any version✓	any version✓
instanttensorUnmapped	—	Not observed	>=0.2.2
jsonschema	4.26.0	>=4.23.0✓	>=4.23.0✓
lark	1.3.1	==1.2.2✗	==1.2.2✗
llguidance	1.7.5	<1.8.0,>=1.7.0?	<1.8.0,>=1.7.0?
lm-format-enforcer	0.11.3	==0.11.3✓	==0.11.3✓
mcp	2.0.0	any version✓	<3.0.0,>=2.2.0✗
mistral_common[image]	1.11.3	>=1.11.6?	>=1.11.6?
model-hosting-container-standards	0.1.14	<1.0.0,>=0.1.14✓	<1.0.0,>=0.1.14✓
msgspec	0.19.0	any version✓	any version✓
multidict	7.2.1	Not observed	>=6.9.1✓
ninja	1.13.2	any version✓	any version✓
numba	0.66.0	==0.65.0✗	==0.65.0✗
numpy	2.4.6	any version✓	any version✓
nvidia-cudnn-frontendUnmapped	—	>=1.19.1	>=1.31.0
nvidia-cutlass-dsl[cu13]Unmapped	—	==4.6.0	==4.8.0
nvtxUnmapped	—	==0.2.15	==0.2.15
openai	2.40.0	>=2.0.0✓	>=2.25.0✓
openai-harmony	0.0.8	>=0.0.3✓	Not observed
opencv-python-headlessUnmapped	—	>=4.13.0	>=4.13.0
opentelemetry-api	1.44.0	>=1.27.0✓	>=1.27.0✓
opentelemetry-exporter-otlp	1.42.1	>=1.27.0✓	>=1.27.0✓
opentelemetry-sdk	1.42.1	>=1.27.0✓	>=1.27.0✓
opentelemetry-semantic-conventions-ai	0.5.1	>=0.4.1✓	>=0.4.1✓
orjson	3.11.7	Not observed	>=3.11.6✓
oss-harmonyUnmapped	—	Not observed	>=0.0.11
outlines_core	0.2.14	==0.2.14✓	==0.2.14✓
partial-json-parser	0.2.1.1~post7	any version?	any version?
pillow	13.0.0	any version✓	>=13.0.0✓
prometheus_client	0.25.0	>=0.18.0✓	>=0.18.0✓
prometheus-fastapi-instrumentator	7.1.0	>=8.0.0✗	>=8.0.0✗
protobuf	7.35.1	!=6.30.,!=6.31.,!=6.32.,!=6.33.0.,!=6.33.1.,!=6.33.2.,!=6.33.3.,!=6.33.4.,>=5.29.6✓	Not observed
protobuf	7.35.1	Not observed	!=6.30.,!=6.31.,!=6.32.,!=6.33.0.,!=6.33.1.,!=6.33.2.,!=6.33.3.,!=6.33.4.,>=5.29.6?
protobuf	7.35.1	Not observed	==7.36.1?
psutil	7.2.2	any version✓	any version✓
py-cpuinfo	9.0.0	any version✓	any version✓
pybase64	1.4.3	any version✓	any version✓
pydantic	2.12.5	>=2.12.0✓	>=2.12.0✓
PyNvVideoCodecUnmapped	—	==2.0.4	==2.0.4
python-json-logger	4.1.0	any version✓	any version✓
pyyaml	6.0.3	any version✓	any version✓
pyzmq	27.1.0	>=25.0.0✓	>=25.0.0✓
quack-kernelsUnmapped	—	==0.6.1	==0.6.5
regex	2026.1.15	any version✓	any version✓
requests	2.33.1	>=2.26.0✓	>=2.33.0✓
safetensors	0.8.0	>=0.6.2✓	>=0.6.2✓
sentencepiece	0.2.1	any version✓	any version✓
setproctitle	1.1.10	any version✓	any version✓
setuptools	83.0.0	<81.0.0,>=77.0.3✗	<81.0.0,>=78.1.1✗
six	1.17.0	>=1.16.0✓	>=1.16.0✓
starlette	1.6.0	>=1.0.1✓	>=1.0.1✓
tiktoken	0.12.0	>=0.6.0✓	>=0.6.0✓
tilelangUnmapped	—	==0.1.12	==0.1.12
tokenizers	0.22.2	>=0.21.1✓	>=0.23.2✗
tokenspeed-mlaUnmapped	—	==0.1.8	==2.0.3
torch	2.13.0	==2.13.0✓	==2.14.0✗
torchaudio	2.11.0	==2.11.0✓	==2.11.0✓
torchcodecUnmapped	—	>=0.14	>=0.14
torchvision	0.28.0	==0.28.0✓	==0.29.0✗
tqdm	4.67.3	any version✓	any version✓
transformers	5.12.1	>=5.5.3✓	<5.21.0,>=5.16.1✗
typing_extensions	4.16.0	>=4.10✓	>=4.10✓
watchfiles	1.2.0	any version✓	any version✓
xgrammar	0.2.1	<1.0.0,>=0.2.1?	==0.2.8?
Python	3.14.9	<3.15,>=3.10✓	<3.15,>=3.11✓

Optional RuntimeDeps

Dependency	Observed source	Current requirement	Candidate requirement
av	17.0.1	any version?	any version?
b12xUnmapped	—	Not observed	==1.5.1
datasets	5.0.1	any version?	any version?
fastsafetensorsUnmapped	—	>=0.3.2	>=0.3.3
helionUnmapped	—	==1.4.0	==1.4.0
instanttensorUnmapped	—	>=0.1.9	>=0.2.2
matplotlib	3.11.0	any version?	any version?
mistral_common[audio]	1.11.3	any version?	any version?
nvidia-deepstream-videodecode-cu13Unmapped	—	>=9.0.2	>=9.0.2
opentelemetry-api	1.44.0	>=1.26.0?	>=1.26.0?
opentelemetry-exporter-otlp	1.42.1	>=1.26.0?	>=1.26.0?
opentelemetry-sdk	1.42.1	>=1.26.0?	>=1.26.0?
opentelemetry-semantic-conventions-ai	0.5.1	>=0.4.1?	>=0.4.1?
pandas	3.0.1	any version?	any version?
plotlyUnmapped	—	any version	any version
runai-model-streamer[azure, gcs, s3]Unmapped	—	>=0.15.7	>=0.15.7
scipy	1.17.1	any version?	any version?
seabornUnmapped	—	any version	any version
smg-grpc-servicer[vllm]Unmapped	—	>=0.5.2	>=0.5.2
soundfile	0.13.1	any version?	any version?
soxr	1.0.0	any version?	any version?
tensorizer	2.12.1	==2.10.1?	==2.10.1?
vllm-gguf-pluginUnmapped	—	>=0.0.2	>=0.0.2
zentorchUnmapped	—	==2.11.0.0	==2.14.0.1

Dependency conditions

llguidance <1.8.0,>=1.7.0?
Applies when (any)
platform_machine == "x86_64" or platform_machine == "arm64" or platform_machine == "aarch64" or platform_machine == "ppc64le" or platform_machine == "s390x"
protobufUpgrade:!=6.30.*,!=6.31.*,!=6.32.*,!=6.33.0.*,!=6.33.1.*,!=6.33.2.*,!=6.33.3.*,!=6.33.4.*,>=5.29.6?
Applies when (any)
platform_machine != "s390x"
protobufUpgrade:==7.36.1?
Applies when (any)
platform_machine == "s390x"
setuptools <81.0.0,>=77.0.3✗→<81.0.0,>=78.1.1✗
Applies when (any)
python_version > "3.11"
six >=1.16.0✓
Applies when (any)
python_version > "3.11"
tokenspeed-mla==0.1.8→==2.0.3Unmapped
Applies when (any)
platform_system == "Linux"
xgrammar <1.0.0,>=0.2.1?→==0.2.8?
Applies when (any)
platform_machine == "x86_64" or platform_machine == "aarch64" or platform_machine == "arm64" or platform_machine == "s390x" or platform_machine == "ppc64le"
av any version?
Applies when (any)
extra == "audio"
b12xUpgrade:==1.5.1Unmapped
Applies when (any)
extra == "b12x"
datasets any version?
Applies when (any)
extra == "bench"
fastsafetensors>=0.3.2→>=0.3.3Unmapped
Applies when (any)
extra == "fastsafetensors"
helion==1.4.0Unmapped
Applies when (any)
extra == "helion"
instanttensor>=0.1.9→>=0.2.2Unmapped
Applies when (any)
extra == "instanttensor"
matplotlib any version?
Applies when (any)
extra == "bench"
mistral_common[audio]any version?
Applies when (any)
extra == "audio"
nvidia-deepstream-videodecode-cu13>=9.0.2Unmapped
Applies when (any)
extra == "deepstream"
opentelemetry-api >=1.26.0?
Applies when (any)
extra == "otel"
opentelemetry-exporter-otlp >=1.26.0?
Applies when (any)
extra == "otel"
opentelemetry-sdk >=1.26.0?
Applies when (any)
extra == "otel"
opentelemetry-semantic-conventions-ai >=0.4.1?
Applies when (any)
extra == "otel"
pandas any version?
Applies when (any)
extra == "bench"
plotlyany versionUnmapped
Applies when (any)
extra == "bench"
runai-model-streamer[azure, gcs, s3]>=0.15.7Unmapped
Applies when (any)
extra == "runai"
scipy any version?
Applies when (any)
extra == "audio"extra == "bench"
seabornany versionUnmapped
Applies when (any)
extra == "bench"
smg-grpc-servicer[vllm]>=0.5.2Unmapped
Applies when (any)
extra == "grpc"
soundfile any version?
Applies when (any)
extra == "audio"
soxr any version?
Applies when (any)
extra == "audio"
tensorizer ==2.10.1?
Applies when (any)
extra == "tensorizer"
vllm-gguf-plugin>=0.0.2Unmapped
Applies when (any)
extra == "extra-quant"
zentorch==2.11.0.0→==2.14.0.1Unmapped
Applies when (any)
extra == "zen"

Advisory · 38

Query ecosystem: PyPIOSV
Query name: vllmOSV
Query version: 0.27.1OSV

Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.

CVE-2026-100650
Fixed events
0.30.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.808%FIRST
Returned advisory
PYSEC-2026-4184OSV
Aliases
GHSA-p6g9-7v3x-m8mv, PYSEC-2026-4184OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · www.vulncheck.com Fix · 752a3a504485
CVE-2026-100653
Fixed events
0.28.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.34%FIRST
Returned advisory
PYSEC-2026-4324OSV
Aliases
GHSA-hhv2-872h-628q, PYSEC-2026-4324OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · www.vulncheck.com Fix · d26a28ab0336
CVE-2026-105752
Summary
vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracleOSV OSV
Fixed events
0.30.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.216%FIRST
Returned advisory
GHSA-935w-9g4m-p28pOSV
Returned advisory
PYSEC-2026-4308OSV
Aliases
GHSA-935w-9g4m-p28p, PYSEC-2026-4308OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:NOSV OSV
References
Advisory · github.com Advisory · nvd.nist.gov Web · 6a2a2bb02b56 Web · github.com Web · github.com Web · github.com Web · github.com
CVE-2026-105753
Summary
vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine coreOSV
Fixed events
0.28.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.427%FIRST
Returned advisory
GHSA-ph3r-5jfg-f84fOSV
Returned advisory
PYSEC-2026-4197OSV
Aliases
GHSA-ph3r-5jfg-f84f, PYSEC-2026-4197OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV OSV
References
Advisory · github.com Advisory · github.com Fix · 396204230423 Fix · github.com Fix · github.com
CVE-2026-105754
Summary
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresOSV OSV
Fixed events
0.30.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.269%FIRST
Returned advisory
GHSA-ph72-cqr5-qpp7OSV
Returned advisory
PYSEC-2026-4309OSV
Aliases
GHSA-ph72-cqr5-qpp7, PYSEC-2026-4309OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV OSV
References
Advisory · github.com Advisory · nvd.nist.gov Web · 1970f3ed4be7 Web · github.com Web · github.com Web · github.com
CVE-2026-105755
Summary
vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`OSV
Fixed events
0.30.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.202%FIRST
Returned advisory
GHSA-2phq-3phc-84pxOSV
Returned advisory
PYSEC-2026-4198OSV
Aliases
GHSA-2phq-3phc-84px, PYSEC-2026-4198OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:LOSV OSV
References
Advisory · github.com Advisory · github.com Fix · ee17d0d86920 Fix · github.com
CVE-2026-105756
Summary
vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of serviceOSV OSV
Fixed events
0.30.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.332%FIRST
Returned advisory
GHSA-2823-qmq8-rwvjOSV
Returned advisory
PYSEC-2026-4306OSV
Aliases
GHSA-2823-qmq8-rwvj, PYSEC-2026-4306OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV OSV
References
Advisory · github.com Advisory · nvd.nist.gov Web · e962733e08d1 Web · github.com Web · github.com Web · github.com
CVE-2026-105757
Summary
vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)OSV
Fixed events
0.30.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.314%FIRST
Returned advisory
GHSA-85xf-c7hm-whqwOSV
Returned advisory
PYSEC-2026-4199OSV
Aliases
GHSA-85xf-c7hm-whqw, PYSEC-2026-4199OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV OSV
References
Advisory · github.com Advisory · github.com Fix · c55e15a44ec4 Fix · github.com
CVE-2026-105758
Summary
vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reachOSV OSV
Fixed events
0.30.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.303%FIRST
Returned advisory
GHSA-x6mc-67gf-chw4OSV
Returned advisory
PYSEC-2026-4310OSV
Aliases
GHSA-x6mc-67gf-chw4, PYSEC-2026-4310OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LOSV OSV
References
Advisory · github.com Advisory · nvd.nist.gov Web · ea723c81c3ea Web · github.com Web · github.com Web · github.com
CVE-2026-105759
Fixed events
0.30.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.411%FIRST
Returned advisory
PYSEC-2026-4325OSV
Aliases
GHSA-5fj9-pfhr-6j48, PYSEC-2026-4325OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOSV
References
Advisory · github.com Fix · 3735c2d5f524 Fix · github.com
CVE-2026-105760
Summary
vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustionOSV OSV
Fixed events
0.30.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.297%FIRST
Returned advisory
GHSA-58v5-2m8f-94prOSV
Returned advisory
PYSEC-2026-4307OSV
Aliases
GHSA-58v5-2m8f-94pr, PYSEC-2026-4307OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LOSV OSV
References
Advisory · github.com Advisory · nvd.nist.gov Web · 8b6de0eb9a09 Web · github.com Web · github.com Web · github.com
CVE-2026-105922
Fixed events
0.32.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.311%FIRST
Returned advisory
PYSEC-2026-4319OSV
Aliases
PYSEC-2026-4319OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · gist.github.com Advisory · vuldb.com Advisory · vuldb.com Advisory · vuldb.com Web · github.com
CVE-2026-114050
Summary
vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engineOSV
Fixed events
0.31.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.207%FIRST
Returned advisory
GHSA-p92p-rxj5-7p2xOSV
Aliases
GHSA-p92p-rxj5-7p2xOSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV
References
Advisory · nvd.nist.gov Web · 7268f6e38ebb Web · github.com Web · github.com Web · github.com Web · www.vulncheck.com
CVE-2026-114052
Fixed events
0.31.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.506%FIRST
Returned advisory
PYSEC-2026-4361OSV
Aliases
GHSA-823j-m4cj-hmjf, PYSEC-2026-4361OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · github.com Advisory · www.vulncheck.com
CVE-2026-114053
Summary
vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code executionOSV
Fixed events
0.31.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.462%FIRST
Returned advisory
GHSA-h3rc-6mm3-gc2mOSV
Aliases
GHSA-h3rc-6mm3-gc2mOSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HOSV
References
Advisory · nvd.nist.gov Web · 31f2e70cd3e4 Web · github.com Web · github.com Web · github.com Web · www.vulncheck.com
CVE-2026-114054
Fixed events
0.31.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.275%FIRST
Returned advisory
PYSEC-2026-4362OSV
Aliases
GHSA-rh6f-3x46-j33q, PYSEC-2026-4362OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · github.com Advisory · www.vulncheck.com
CVE-2026-114055
Summary
vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)OSV
Fixed events
0.31.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.42%FIRST
Returned advisory
GHSA-gx7p-2j49-hfq4OSV
Aliases
GHSA-gx7p-2j49-hfq4OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOSV
References
Advisory · nvd.nist.gov Web · 31f2e70cd3e4 Web · github.com Web · github.com Web · github.com Web · www.vulncheck.com
CVE-2026-115911
Summary
vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread poolOSV
Fixed events
0.32.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.312%FIRST
Returned advisory
GHSA-542m-9234-8gvfOSV
Returned advisory
PYSEC-2026-4344OSV
Aliases
GHSA-542m-9234-8gvf, PYSEC-2026-4344OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV OSV
References
Advisory · github.com Advisory · nvd.nist.gov Fix · cff08b461e08 Fix · github.com Fix · github.com
CVE-2026-115912
Summary
vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabledOSV
Fixed events
0.32.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.51%FIRST
Returned advisory
GHSA-6757-hggm-hp2wOSV
Returned advisory
PYSEC-2026-4345OSV
Aliases
GHSA-6757-hggm-hp2w, PYSEC-2026-4345OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HOSV
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HOSV
References
Advisory · github.com Advisory · nvd.nist.gov Fix · 3d5625cc3c24 Fix · github.com Fix · github.com
CVE-2026-115913
Summary
vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engineOSV
Fixed events
0.32.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.329%FIRST
Returned advisory
GHSA-8397-8qf6-f2gmOSV
Aliases
GHSA-8397-8qf6-f2gmOSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV
References
Advisory · nvd.nist.gov Web · 3d52578e1345 Web · github.com Web · github.com Web · github.com
CVE-2026-115914
Summary
vLLM DeepSeek-OCR image processing vulnerable to denial of serviceOSV
Fixed events
0.32.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.397%FIRST
Returned advisory
GHSA-gq5q-89c7-vhvxOSV
Aliases
GHSA-gq5q-89c7-vhvxOSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV
References
Advisory · nvd.nist.gov Web · c15672cfb491 Web · github.com Web · github.com Web · github.com
CVE-2026-115915
Summary
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCEOSV
Fixed events
0.32.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.66%FIRST
Returned advisory
GHSA-h3rc-j82p-2c3hOSV
Aliases
GHSA-h3rc-j82p-2c3h, PYSEC-2026-4346OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HOSV
References
Advisory · nvd.nist.gov Web · 710ac56e691d Web · github.com Web · github.com Web · github.com
CVE-2026-115916
Summary
vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)OSV
Fixed events
0.32.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.312%FIRST
Returned advisory
GHSA-q97c-p368-75c4OSV
Returned advisory
PYSEC-2026-4347OSV
Aliases
GHSA-q97c-p368-75c4, PYSEC-2026-4347OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV OSV
References
Advisory · github.com Advisory · nvd.nist.gov Fix · 37cecc8141e2 Fix · github.com Fix · github.com
CVE-2026-115917
Summary
vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP serverOSV
Fixed events
0.32.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.24%FIRST
Returned advisory
GHSA-vvpg-rrww-wpmhOSV
Returned advisory
PYSEC-2026-4348OSV
Aliases
GHSA-vvpg-rrww-wpmh, PYSEC-2026-4348OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:NOSV
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:NOSV
References
Advisory · github.com Advisory · nvd.nist.gov Fix · fcae5c98870f Fix · github.com Fix · github.com
CVE-2026-115918
Summary
vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargsOSV
Fixed events
0.32.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.35%FIRST
Returned advisory
GHSA-x567-49g5-p4cfOSV
Returned advisory
PYSEC-2026-4349OSV
Aliases
GHSA-x567-49g5-p4cf, PYSEC-2026-4349OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV OSV
References
Advisory · github.com Advisory · nvd.nist.gov Fix · cff08b461e08 Fix · github.com Fix · github.com
CVE-2026-116178
Fixed events
0.30.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.331%FIRST
Returned advisory
PYSEC-2026-4353OSV
Aliases
GHSA-34qw-q2h2-jp3m, PYSEC-2026-4353OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOSV
References
Advisory · www.vulncheck.com Fix · github.com
CVE-2026-69147
Summary
vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservationOSV OSV
Fixed events
0.28.0OSV OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.583%FIRST
Returned advisory
GHSA-8pw2-6jv3-mj5jOSV
Returned advisory
PYSEC-2026-4178OSV
Aliases
GHSA-8pw2-6jv3-mj5j, PYSEC-2026-4178OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV OSV
References
Advisory · github.com Advisory · nvd.nist.gov Web · 283893c72292 Web · ba22152096b2 Web · github.com Web · github.com Web · github.com
CVE-2026-90553
Fixed events
0.28.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.308%FIRST
Returned advisory
PYSEC-2026-3985OSV
Aliases
GHSA-3c86-2m5g-59q7, PYSEC-2026-3985OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · github.com Advisory · www.vulncheck.com
CVE-2026-93436
Fixed events
0.30.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.755%FIRST
Returned advisory
PYSEC-2026-3996OSV
Aliases
PYSEC-2026-3996OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · www.vulncheck.com Fix · github.com Web · github.com
CVE-2026-93592
Fixed events
0.28.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.544%FIRST
Returned advisory
PYSEC-2026-3997OSV
Aliases
GHSA-25q3-v2hm-8vpf, PYSEC-2026-3997OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · www.vulncheck.com Fix · github.com
CVE-2026-93840
Fixed events
0.29.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.246%FIRST
Returned advisory
PYSEC-2026-3998OSV
Aliases
PYSEC-2026-3998OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NOSV
References
Advisory · www.vulncheck.com Fix · 5b0e5b69ac1a Fix · github.com Web · github.com Web · github.com
CVE-2026-93841
Fixed events
0.30.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.237%FIRST
Returned advisory
PYSEC-2026-3999OSV
Aliases
PYSEC-2026-3999OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NOSV
References
Advisory · www.vulncheck.com Fix · github.com Web · github.com Web · github.com
CVE-2026-93989
Fixed events
0.30.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.202%FIRST
Returned advisory
PYSEC-2026-4000OSV
Aliases
PYSEC-2026-4000OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NOSV
References
Advisory · www.vulncheck.com Fix · github.com Web · github.com Web · github.com
CVE-2026-94622
Fixed events
0.30.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.627%FIRST
Returned advisory
PYSEC-2026-4004OSV
Aliases
PYSEC-2026-4004OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · www.vulncheck.com Fix · github.com Web · github.com
CVE-2026-94623
Fixed events
0.30.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.627%FIRST
Returned advisory
PYSEC-2026-4005OSV
Aliases
PYSEC-2026-4005OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · www.vulncheck.com Fix · github.com Web · github.com
CVE-2026-94624
Summary
vllm p2p never connected zmq_exhaustionOSV
Fixed events
0.32.0OSV
Fixed events
0.30.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.434%FIRST
Returned advisory
GHSA-frvg-qw88-hww9OSV
Returned advisory
PYSEC-2026-4006OSV
Aliases
GHSA-frvg-qw88-hww9, PYSEC-2026-4006OSV
KEV
NoCISA
CVSS_V3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HOSV
CVSS_V4
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · nvd.nist.gov Advisory · www.vulncheck.com Fix · github.com Web · github.com Web · github.com Web · github.com Web · 93d2cab35e8a Web · github.com Web · github.com
CVE-2026-94625
Fixed events
0.30.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.521%FIRST
Returned advisory
PYSEC-2026-4007OSV
Aliases
PYSEC-2026-4007OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · www.vulncheck.com Fix · github.com Web · github.com
CVE-2026-94626
Fixed events
0.30.0OSV
EPSS model date
2026-11-09FIRST
EPSS probability
0.627%FIRST
Returned advisory
PYSEC-2026-4008OSV
Aliases
PYSEC-2026-4008OSV
KEV
NoCISA
CVSS_V4
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XOSV
References
Advisory · www.vulncheck.com Fix · github.com Web · github.com Web · github.com

Description

vLLM is a fast and easy-to-use library for LLM inference and serving, featuring PagedAttention for efficient management of attention key/value memory, continuous batching of incoming requests, and an OpenAI-compatible API server.

Changelog

SPECS: python-vllm: add rocm flavor
CHEN Xuan58d8c13a9a652026-08-27 14:17:21 UTC
SPECS: add python-vllm
CHEN Xuan91339a91f81a2026-08-24 07:25:32 UTC

PR · 3

#1181 SPECS: add rocm flavor for vLLM
Sakura2862026-08-27 14:32:29 UTC
#1148 SPECS: python-vllm: add left out requirements
Sakura2862026-08-24 17:21:24 UTC
#1144 SPECS: add python-vllm and requirements
Sakura2862026-08-24 17:21:08 UTC

Checks

Monitor	Observation	Last checked
Source	Checked	2026-11-10 08:33:57 UTC
Version	Checked	2026-11-10 05:36:01 UTC
Build	Checked	2026-11-10 08:34:46 UTC
GitHub	Checked	2026-11-10 08:24:40 UTC
EOL	Not configured No reliable monitor identity/configuration.	—
LicenseDiff	Checked Compared same-provider, same-project SPDX metadata for this version pair.	2026-11-09 18:56:32 UTC Last attempted2026-11-09 23:25:03 UTC
Dependencies	Checked	2026-11-09 18:56:32 UTC Last attempted2026-11-09 23:25:04 UTC
Advisory	Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated.	2026-11-10 07:10:49 UTC Last attempted2026-11-10 07:25:38 UTC
Yanked	Checked	2026-11-10 06:58:54 UTC

Monitor	Checks
Source	6367 Checked 17 CheckFailed
Version	5534 Checked 132 CheckFailed 707 Not configured 3 Partial evidence 8 Input unavailable
Build	6382 Checked 2 Not yet checked
GitHub	6384 Checked
EOL	6260 Not configured 118 Checked 3 Metadata unavailable 3 Input unavailable
LicenseDiff	1665 Not configured 187 Input changed 3175 Not applicable 12 Input unavailable 1134 Checked 207 Metadata unavailable 4 CheckFailed
Dependencies	1852 Not configured 3214 Checked 1248 Metadata unavailable 7 Input unavailable 58 Partial evidence 5 CheckFailed
Advisory	4996 Checked 1375 Not configured 7 Input unavailable 6 Metadata unavailable
Yanked	2248 Not configured 4116 Checked 5 CheckFailed 7 Input unavailable 8 Metadata unavailable