TI-2026-32202 CVE-2026-44223 · GHSA-83vm-p52w-f9pw
vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters
Priority MEDIUM 62
vLLM is an inference and serving engine for large language models (LLMs).
RHSA-2026:57387
Red Hat AI Inference 3.4.4 (spyre)
Released 2026-08-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.4 registry.redhat.io/rhaii/vllm-spyre-rhel9
Fixes 10 records
TI-2026-29006 CVE-2026-40192 · GHSA-whj4-6x5x-4v2j
Pillow is vulnerable to a FITS GZIP decompression bomb
Priority MEDIUM 45
Pillow is a Python imaging library.
TI-2026-30619 CVE-2026-42311 · GHSA-pwv6-vv43-88gr
Pillow: OOB Write with Invalid PSD Tile Extents (Integer Overflow)
Priority MEDIUM 44
Pillow is a Python imaging library.
TI-2026-30106 CVE-2026-41523 · GHSA-q8gq-377p-jq3r
vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution
Priority LOW 37
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-27000 CVE-2026-34756 · GHSA-3mwp-wvh9-7528
vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server
Priority LOW 29
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-26999 CVE-2026-34755 · GHSA-pq5c-rjhq-qp7p
vLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing
Priority LOW 29
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-26997 CVE-2026-34753 · GHSA-pf3h-qjgv-vcpr
vLLM affected by Server-Side Request Forgery (SSRF) in `download_bytes_from_url `
Priority LOW 24
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-30618 CVE-2026-42310 · GHSA-r73j-pqj5-w3x7
Pillow: PDF Parsing Trailer Infinite Loop (DoS)
Priority LOW 22
Pillow is a Python imaging library.
TI-2026-30617 CVE-2026-42309 · GHSA-5xmw-vc9v-4wf2
Pillow: Heap buffer overflow with nested list coordinates
Priority LOW 22
Pillow is a Python imaging library.
TI-2026-30616 CVE-2026-42308 · GHSA-wjx4-4jcj-g98j
Pillow: Integer overflow when processing fonts
Priority LOW 22
Pillow is a Python imaging library.