TI-2026-39137 CVE-2026-54234 · GHSA-8wr5-jm2h-8r4f
vLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjection
Priority HIGH 72
vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.
RHSA-2026:60363
Red Hat AI Inference Server 3.3.6 (Spyre)
Released 2026-08-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
Fixes 5 records
TI-2026-40113 CVE-2026-55574 · GHSA-rwxx-mrjm-wc2m
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
Priority LOW 38
vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.
TI-2026-32201 CVE-2026-44222 · GHSA-hpv8-x276-m59f
vLLM: Remote DoS via Special-Token Placeholders
Priority LOW 33
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-34745 CVE-2026-47155 · GHSA-3ww4-5jv9-j5gm
vLLM: Artifact Pin Decay in vLLM allows pinned deployments to load unpinned code, weights, and processors
Priority LOW 28
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-38894 CVE-2026-53923 · GHSA-5jv2-g5wq-cmr4
vLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflow
Priority LOW 25
vLLM is an inference and serving engine for large language models (LLMs).