Known Vulnerabilities for products from Vllm
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Vllm".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-56340 json | Not Provided | 2026-06-20 | 2026-06-30 | |
| CVE-2026-55646 json | Not Provided | 2026-07-06 | 2026-07-06 | |
| CVE-2026-55574 json | vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, the structured_outputs... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-55514 json | vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a /v1/... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-54236 json | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, the fix for CVE-2026-22778, whi... | Not Provided | 2026-06-22 | 2026-06-24 |
| CVE-2026-54235 json | Not Provided | 2026-06-22 | 2026-06-23 | |
| CVE-2026-54234 json | vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, a frontend-legal multi... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-54233 json | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, vLLM's /v1/audio/transcriptions... | Not Provided | 2026-06-22 | 2026-06-24 |
| CVE-2026-54232 json | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable ... | Not Provided | 2026-06-22 | 2026-06-24 |
| CVE-2026-53923 json | vLLM is an inference and serving engine for large language models (LLMs). From 0.5.5 until 0.23.1rc0, integer truncation of t... | Not Provided | 2026-06-22 | 2026-06-24 |
| CVE-2026-48746 json | vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI we... | Not Provided | 2026-06-22 | 2026-07-07 |
| CVE-2026-47155 json | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, vLLM's revision pinning controls d... | Not Provided | 2026-06-22 | 2026-06-24 |
| CVE-2026-44223 json | vLLM is an inference and serving engine for large language models (LLMs). From 0.18.0 to before 0.20.0, the extract_hidden_st... | Not Provided | 2026-05-12 | 2026-06-22 |
| CVE-2026-44222 json | vLLM is an inference and serving engine for large language models (LLMs). From 0.6.1 to before 0.20.0, there is a a Token Inj... | Not Provided | 2026-05-12 | 2026-05-14 |
| CVE-2026-41523 json | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert-based security check in ... | Not Provided | 2026-06-22 | 2026-07-07 |
| CVE-2026-34756 json | vLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.19.0, a Denial of Service vu... | Not Provided | 2026-04-06 | 2026-07-07 |
| CVE-2026-34755 json | vLLM is an inference and serving engine for large language models (LLMs). From 0.7.0 to before 0.19.0, the VideoMediaIO.load_... | Not Provided | 2026-04-06 | 2026-07-07 |
| CVE-2026-34753 json | vLLM is an inference and serving engine for large language models (LLMs). From 0.16.0 to before 0.19.0, a server-side request... | Not Provided | 2026-04-06 | 2026-04-20 |
| CVE-2026-27893 json | vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.1... | Not Provided | 2026-03-27 | 2026-07-10 |
| CVE-2026-25960 json | vLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0... | Not Provided | 2026-03-09 | 2026-06-30 |