Known Vulnerabilities for products from Vllm
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Vllm".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116181 json | Not Provided | 2026-10-25 | 2026-10-25 | |
| CVE-2026-116180 json | Not Provided | 2026-10-25 | 2026-10-25 | |
| CVE-2026-116179 json | Not Provided | 2026-10-25 | 2026-10-25 | |
| CVE-2026-116178 json | Not Provided | 2026-10-25 | 2026-10-25 | |
| CVE-2026-116177 json | Not Provided | 2026-10-25 | 2026-10-25 | |
| CVE-2026-116176 json | Not Provided | 2026-10-25 | 2026-10-25 | |
| CVE-2026-116175 json | Not Provided | 2026-10-25 | 2026-10-25 | |
| CVE-2026-116174 json | Not Provided | 2026-10-25 | 2026-10-25 | |
| CVE-2026-116173 json | Not Provided | 2026-10-25 | 2026-10-25 | |
| CVE-2026-116172 json | Not Provided | 2026-10-25 | 2026-10-25 | |
| CVE-2026-105922 json | A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mas... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-105760 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level media_... | Not Provided | 2026-10-05 | 2026-10-16 |
| CVE-2026-105759 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metrics mi... | Not Provided | 2026-10-05 | 2026-10-16 |
| CVE-2026-105758 json | vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and Qwen... | Not Provided | 2026-10-05 | 2026-10-08 |
| CVE-2026-105757 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can es... | Not Provided | 2026-10-05 | 2026-10-08 |
| CVE-2026-105756 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, OpenAI-compatible request models accept a... | Not Provided | 2026-10-05 | 2026-10-08 |
| CVE-2026-105755 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at the /sc... | Not Provided | 2026-10-05 | 2026-10-08 |
| CVE-2026-105754 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint in th... | Not Provided | 2026-10-05 | 2026-10-08 |
| CVE-2026-105753 json | vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the default mirrored multimodal LRU cache... | Not Provided | 2026-10-05 | 2026-10-08 |
| CVE-2026-105752 json | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, Harmony tool continuations submitted thro... | Not Provided | 2026-10-05 | 2026-10-08 |