Known Vulnerabilities for Vllm by Vllm
Listed below are 10 of the newest known vulnerabilities associated with "Vllm" by "Vllm".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109311 json | vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() fallback with only a file-size check, exposing FFmpeg's... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-105922 json | A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mas... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-105775 json | A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of t... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-105760 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level media_... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-105759 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metrics mi... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-105758 json | vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and Qwen... | Not Provided | 2026-10-05 | 2026-10-08 |
| CVE-2026-105757 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can es... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-105756 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, OpenAI-compatible request models accept a... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-105755 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at the /sc... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-105754 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint in th... | Not Provided | 2026-10-05 | 2026-10-08 |