SSRF Protection Bypass in vLLM

vLLM is an inference and serving engine for large language models (LLMs)

vLLM is an inference and serving engine for large language models (LLMs)

vLLM, an inference and serving engine for large language models (LLMs), has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments using the `PyNcclPipe` KV cache…

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs

vllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue() API function

vLLM: OpenAI auth bypass

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs

vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile

vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out

vLLM is an inference and serving engine for large language models (LLMs)

vLLM is an inference and serving engine for large language models (LLMs)

vLLM is a library for LLM inference and serving

vLLM is an inference and serving engine for large language models

vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor

vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)

vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service

vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_ids

vLLM before 0.29.0 CPU Exhaustion via unbounded cache_salt

vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision

vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size

vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions

vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure

vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadata

vLLM before 0.28.0 Denial of Service via negative token ID

vLLM through 0.29.0 Memory Exhaustion via Rejected Requests

vLLM before 0.28.0 Denial of Service via audio extraction

vLLM up to and including 0.17.0 allows remote attackers to cause a Denial of Service via memory exhaustion

vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends

vLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjection

vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution

vLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflow

vLLM - Denial of Service via Unvalidated Multimodal Embeddings

vllm - Regular Expression Denial of Service in Multiple Components

Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm

vLLM: Remote DoS via Special-Token Placeholders

vLLM is an inference and serving engine for large language models (LLMs)

vLLM is an inference and serving engine for large language models (LLMs)

vLLM is an inference and serving engine for large language models (LLMs)

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs

vLLM is an inference and serving engine for large language models (LLMs)

vLLM: Downmix Implementation Differences as Attack Vectors Against Audio AI Models

vLLM is an inference and serving engine for large language models (LLMs)

vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)

vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core

vLLM before 0.29.0 Denial of Service via out-of-range stop_token_ids

vLLM 0.22.1 before 0.28.0 Incomplete Artifact Pin Propagation