VL
Product
vllm
by vllm-project · last CVE Oct 26, 2026
105
CVEs
0
On KEV
9.8
Max CVSS
38
New 30D
Severity mix
Critical 6High 39Medium 57Low 3
Watch

Add vllm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114049
3.7
0%
Oct 21
vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense
Affected: before 0.31.0
CVE-2026-90713
3.3
0%
Sep 14
vllm-project vLLM tiktoken vocab File mod.rs new denial of service
Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +23 more
CVE-2026-105752
3.1
0%
Oct 5
vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle
Affected: < 0.30.0
Showing 3