TI-2026-32202 CVE-2026-44223 · GHSA-83vm-p52w-f9pw
vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters
Priority MEDIUM 62
vLLM is an inference and serving engine for large language models (LLMs).
RHSA-2026:59151
Red Hat Enterprise Linux AI 3.4.4 enhancement update
Released 2026-08-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AI 3.4 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
Fixes 6 records
TI-2026-30106 CVE-2026-41523 · GHSA-q8gq-377p-jq3r
vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution
Priority LOW 37
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-27000 CVE-2026-34756 · GHSA-3mwp-wvh9-7528
vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server
Priority LOW 29
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-26999 CVE-2026-34755 · GHSA-pq5c-rjhq-qp7p
vLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing
Priority LOW 29
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-26997 CVE-2026-34753 · GHSA-pf3h-qjgv-vcpr
vLLM affected by Server-Side Request Forgery (SSRF) in `download_bytes_from_url `
Priority LOW 24
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-20745 CVE-2026-25645 · GHSA-gc5v-m9x4-r6x2
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
Priority LOW 24
Requests is a HTTP library.