Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

Security Advisories for https://github.com/vllm-project/vllm Clear Filters

High
7 days ago

vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class GSA_kwCzR0hTQS0zZjZjLTdmdzItcHBtNM4ABNF-

pypi vllm
Moderate
7 days ago

vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server GSA_kwCzR0hTQS02ZnZxLTIzY3ctNTYyOM4ABNF8

pypi vllm
High
8 days ago

vLLM is vulnerable to timing attack at bearer auth GSA_kwCzR0hTQS13cjloLWc3MngtbXdobc4ABNDR

pypi vllm
High
about 2 months ago

vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder GSA_kwCzR0hTQS03OWo2LWcybTMtamdmd84ABLTx

pypi vllm
High
about 2 months ago

vllm API endpoints vulnerable to Denial of Service Attacks GSA_kwCzR0hTQS1yeGM0LTN3NnItNHY0N84ABLTs

pypi vllm
Moderate
5 months ago

vLLM Tool Schema allows DoS via Malformed pattern and type Fields GSA_kwCzR0hTQS12cnEzLXI4NzktN202Nc4ABIcm

pypi vllm
Moderate
5 months ago

vLLM allows clients to crash the openai server with invalid regex GSA_kwCzR0hTQS05aGNmLXY3bTQtNm0yas4ABIcl

pypi vllm
Moderate
5 months ago

vLLM DOS: Remotely kill vllm over http with invalid JSON schema GSA_kwCzR0hTQS02cWM5LXY0cjgtMjJ4Z84ABIck

pypi vllm
Moderate
5 months ago

vLLM has a Weakness in MultiModalHasher Image Hashing Implementation GSA_kwCzR0hTQS1jNjVwLXg2NzctZmdqNs4ABIby

pypi vllm
Low
5 months ago

Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching GSA_kwCzR0hTQS00cWpoLTlmdjktcjg1cs4ABIbx

pypi vllm
Moderate
5 months ago

vLLM vulnerable to Regular Expression Denial of Service GSA_kwCzR0hTQS1qODI4LTI4cmotaGZocM4ABIbw

pypi vllm
Moderate
5 months ago

vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py` GSA_kwCzR0hTQS13NnE3LWo2NDItN2MyNc4ABIbv

pypi vllm
Critical
5 months ago

vLLM Allows Remote Code Execution via PyNcclPipe Communication Service GSA_kwCzR0hTQS1oanE0LTg3eGgtZzRmds4ABIIT

pypi vllm
High
5 months ago

Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration GSA_kwCzR0hTQS05cGNjLWd2eDUtcjV3bc4ABHiL

pypi vllm
Moderate
6 months ago

phi4mm: Quadratic Time Complexity in Input Token Processing​ leads to denial of service GSA_kwCzR0hTQS12YzZtLWhtNDktZzlxZ84ABHQt

pypi vllm
Critical
6 months ago

vLLM Vulnerable to Remote Code Execution via Mooncake Integration GSA_kwCzR0hTQS1oajR3LWhtMmctcDZ3Nc4ABHQT

pypi vllm
High
6 months ago

Data exposure via ZeroMQ on multi-node vLLM deployment GSA_kwCzR0hTQS05ZjhmLTJ2bWYtODg1as4ABHQS

pypi vllm
Critical
7 months ago

vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object GSA_kwCzR0hTQS1wZ3I3LW1ocDUtZmdqcM4ABFtr

pypi vllm
Critical
7 months ago

vLLM Deserialization of Untrusted Data vulnerability GSA_kwCzR0hTQS01dnFyLXdwcmMtY3BwN84ABFsD

pypi vllm
Critical
7 months ago

vLLM Allows Remote Code Execution via Mooncake Integration GSA_kwCzR0hTQS14M204LWY3ZzUtcWhtN84ABFpg

pypi vllm
Moderate
7 months ago

vLLM denial of service via outlines unbounded cache on disk GSA_kwCzR0hTQS1tZ3JtLWZnanYtbWh2OM4ABFpf

pypi vllm
Low
8 months ago

vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache GSA_kwCzR0hTQS1ybTc2LTRtcmYtdjlyOM4ABEMS

pypi vllm
High
9 months ago

vllm: Malicious model to RCE by torch.load in hf_model_weights_iterator GSA_kwCzR0hTQS1yaDRqLTVyaHctaHI1NM4ABD24

pypi vllm
Moderate
about 1 year ago

vLLM Denial of Service via the best_of parameter GSA_kwCzR0hTQS13YzM2LTk2OTQtZjlyZs4AA_mw

pypi vllm
High
about 1 year ago

vLLM denial of service vulnerability GSA_kwCzR0hTQS13MnI3LTk1NzktMjdoZs4AA_m0

pypi vllm

Filter by Severity

Moderate 10,511 High 8,276 Critical 3,399 Low 1,543

Filter by Ecosystem

maven 6,800 packagist 5,274 pypi 4,843 npm 4,334 go 2,875 nuget 1,558 cargo 1,099 rubygems 909 actions 39 hex 39 swift 34 pub 9

Filter by Package

tensorflow 433 moodle/moodle 418 tensorflow-cpu 406 tensorflow-gpu 396 magento/community-edition 302 Microsoft.ChakraCore 247 org.jenkins-ci.main:jenkins-core 242 typo3/cms 178 com.liferay.portal:release.portal.bom 143 org.apache.tomcat:tomcat 136 github.com/mattermost/mattermost/server/v8 130 com.liferay.portal:release.dxp.bom 122 pimcore/pimcore 120 dolibarr/dolibarr 117 phpmyadmin/phpmyadmin 107 typo3/cms-core 106 microweber/microweber 103 drupal/core 100 silverstripe/framework 90 Django 89 apache-airflow 86 librenms/librenms 84 thorsten/phpmyfaq 74 drupal/drupal 73 com.fasterxml.jackson.core:jackson-databind 69 github.com/usememos/memos 68 concrete5/concrete5 67 salt 65 ansible 63 symfony/symfony 63 magento/project-community-edition 61 actionpack 61 apache-superset 61 shopware/platform 58 github.com/grafana/grafana 56 org.apache.struts:struts2-core 55 Plone 54 mlflow 53 craftcms/cms 53 org.keycloak:keycloak-core 50 nova 48 github.com/rancher/rancher 48 mautic/core 47 baserproject/basercms 47 nokogiri 46 django 46 github.com/hashicorp/vault 46 gradio 44 shopware/core 44 vyper 44 org.elasticsearch:elasticsearch 43 org.xwiki.platform:xwiki-platform-oldcore 43 matrix-synapse 43 org.keycloak:keycloak-services 42 github.com/mattermost/mattermost-server 42 nilsteampassnet/teampass 42 rdiffweb 42 k8s.io/kubernetes 41 plone 41 mantisbt/mantisbt 41 showdoc/showdoc 41 intelliants/subrion 40 froxlor/froxlor 40 org.apache.tomcat.embed:tomcat-embed-core 40 picklescan 39 directus 39 snipe/snipe-it 38 github.com/mattermost/mattermost-server/v6 37 com.thoughtworks.xstream:xstream 37 com.jfinal:jfinal 36 net.mingsoft:ms-mcms 36 github.com/argoproj/argo-cd/v2 36 rack 35 io.undertow:undertow-core 35 moin 35 github.com/answerdev/answer 34 gogs.io/gogs 33 parse-server 33 zendframework/zendframework1 32 org.jenkins-ci.plugins:script-security 32 github.com/cilium/cilium 31 keystone 31 flowise 31 shopware/shopware 31 github.com/hashicorp/nomad 31 opencv-contrib-python 30 getgrav/grav 30 opencv-python 30 next 29 github.com/docker/docker 29 github.com/hashicorp/consul 29 github.com/argoproj/argo-cd 29 contao/core-bundle 29 Pillow 28 vllm 28 electron 28 pillow 28 mediawiki/core 28 org.opencms:opencms-core 27 centreon/centreon 27 DotNetNuke.Core 27 org.apache.solr:solr-core 27 prestashop/prestashop 27 org.springframework.security:spring-security-core 26 pocketmine/pocketmine-mp 25 org.eclipse.jetty:jetty-server 25 openssl-src 25 github.com/traefik/traefik/v2 25 open-webui 25 rubygems-update 25 magento/core 24 surrealdb 24 getkirby/cms 24 org.keycloak:keycloak-parent 24 pyload-ng 24 puppet 23 simplesamlphp/simplesamlphp 23 remdex/livehelperchat 23 grumpydictator/firefly-iii 23 deno 22 phpoffice/phpspreadsheet 22 laravel/framework 22 activerecord 22 zendframework/zendframework 22 ckb 22 tribalsystems/zenario 22 org.apache.openmeetings:openmeetings-parent 22 org.apache.tomcat:tomcat-catalina 21 org.apache.nifi:nifi 21 @openzeppelin/contracts 21 github.com/goharbor/harbor 21 @openzeppelin/contracts-upgradeable 21 org.bouncycastle:bcprov-jdk15on 21 glance 21 Microsoft.AspNetCore.App.Runtime.win-x64 21 Microsoft.AspNetCore.App.Runtime.win-x86 20 code.gitea.io/gitea 20 wasmtime 20 org.cloudfoundry.identity:cloudfoundry-identity-server 20 Microsoft.AspNetCore.App.Runtime.win-arm 20 ethyca-fides 20 cockpit-hq/cockpit 20 aim 20 helm.sh/helm/v3 20 funadmin/funadmin 20 org.xwiki.platform:xwiki-platform-web-templates 20 github.com/ethereum/go-ethereum 20 typo3/cms-backend 20 github.com/zitadel/zitadel 19 transformers 19 neutron 19 topthink/framework 19 Microsoft.AspNetCore.App.Runtime.win-arm64 19 contao/contao 19 langchain 19 org.springframework:spring-core 18 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 18 mindsdb 18 Microsoft.AspNetCore.App.Runtime.osx-x64 18 Microsoft.AspNetCore.App.Runtime.linux-arm 18 com.vaadin:vaadin-bom 18 golang.org/x/net 18 genix/cms 18 Microsoft.AspNetCore.App.Runtime.linux-x64 18 mercurial 18 cobbler 18 Microsoft.AspNetCore.App.Runtime.linux-arm64 18 org.apache.jspwiki:jspwiki-main 18 forkcms/forkcms 18 OctoPrint 17 calibreweb 17 org.apache.geode:geode-core 17 github.com/traefik/traefik/v3 17 opencart/opencart 17 francoisjacquet/rosariosis 17 cakephp/cakephp 17 org.apache.inlong:manager-pojo 17 ezsystems/ezpublish-kernel 17 notebook 17 yetiforce/yetiforce-crm 17 github.com/openfga/openfga 17 cryptography 17 openmage/magento-lts 17 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 17 sequelize 16 rusqlite 16 ghost 16 lollms 16 tinymce 16 org.apache.ranger:ranger 16 PaddlePaddle 16 phpbb/phpbb 16 org.apache.activemq:activemq-client 16 paddlepaddle 16 org.apache.dubbo:dubbo 16 Microsoft.NetCore.App.Runtime.win-arm 15 Microsoft.NetCore.App.Runtime.win-arm64 15 aiohttp 15 github.com/containerd/containerd 15 ec-cube/ec-cube 15

Filter by Repository

https://github.com/tensorflow/tensorflow 433 https://github.com/moodle/moodle 243 https://github.com/xwiki/xwiki-platform 222 https://github.com/chakra-core/ChakraCore 214 https://github.com/jenkinsci/jenkins 178 https://github.com/liferay/liferay-portal 154 https://github.com/django/django 119 https://github.com/pimcore/pimcore 116 https://github.com/apache/tomcat 114 https://github.com/apache/airflow 104 https://github.com/TYPO3/typo3 94 https://github.com/microweber/microweber 90 https://github.com/keycloak/keycloak 86 https://github.com/librenms/librenms 75 https://github.com/rails/rails 70 https://github.com/FasterXML/jackson-databind 70 https://github.com/thorsten/phpmyfaq 69 https://github.com/usememos/memos 68 https://github.com/silverstripe/silverstripe-framework 68 https://github.com/kubernetes/kubernetes 66 https://github.com/symfony/symfony 64 https://github.com/Dolibarr/dolibarr 60 https://github.com/ansible/ansible 59 https://github.com/python-pillow/Pillow 52 https://github.com/spring-projects/spring-framework 51 https://github.com/argoproj/argo-cd 50 https://github.com/apache/struts 47 https://github.com/grafana/grafana 47 https://github.com/mautic/mautic 46 https://github.com/phpmyadmin/phpmyadmin 45 https://github.com/vyperlang/vyper 44 https://github.com/rancher/rancher 44 https://github.com/concretecms/concretecms 44 https://github.com/shopware/platform 43 https://github.com/saltstack/salt 42 https://github.com/ikus060/rdiffweb 42 https://github.com/craftcms/cms 41 https://github.com/directus/directus 41 https://github.com/mmaitre314/picklescan 39 https://github.com/star7th/showdoc 39 https://github.com/mattermost/mattermost 39 https://github.com/openstack/nova 38 https://github.com/mantisbt/mantisbt 38 https://github.com/magento/magento2 38 https://github.com/gradio-app/gradio 38 https://github.com/plone/Products.CMFPlone 37 https://github.com/dotnet/runtime 37 https://github.com/x-stream/xstream 37 https://github.com/octobercms/october 36 https://github.com/sparklemotion/nokogiri 35 https://github.com/shopware/shopware 35 https://github.com/umbraco/Umbraco-CMS 35 https://github.com/mlflow/mlflow 35 https://github.com/apache/activemq 34 https://github.com/answerdev/answer 34 https://github.com/parse-community/parse-server 33 https://github.com/opencv/opencv 32 https://github.com/matrix-org/synapse 32 https://github.com/go-gitea/gitea 32 https://github.com/cilium/cilium 31 https://github.com/PaddlePaddle/Paddle 31 https://github.com/apache/inlong 31 https://github.com/snipe/snipe-it 30 https://github.com/contao/contao 30 https://github.com/rack/rack 29 https://github.com/CVEProject/cvelist 28 https://github.com/openstack/keystone 28 https://github.com/gogs/gogs 28 https://github.com/electron/electron 28 https://github.com/FlowiseAI/Flowise 28 https://github.com/netty/netty 26 https://github.com/github/advisory-database 26 https://github.com/apache/nifi 26 https://github.com/baserproject/basercms 26 https://github.com/geoserver/geoserver 26 https://github.com/froxlor/froxlor 26 https://github.com/surrealdb/surrealdb 25 https://github.com/vercel/next.js 25 https://github.com/strapi/strapi 25 https://github.com/denoland/deno 25 https://github.com/pmmp/PocketMine-MP 25 https://github.com/traefik/traefik 25 https://github.com/langchain-ai/langchain 25 https://github.com/vllm-project/vllm 25 https://github.com/getgrav/grav 24 https://github.com/pyload/pyload 24 https://github.com/run-llama/llama_index 24 https://github.com/bcgit/bc-java 24 https://github.com/apache/cxf 24 https://github.com/TYPO3/TYPO3.CMS 23 https://github.com/firefly-iii/firefly-iii 23 https://github.com/moby/moby 23 https://github.com/nilsteampassnet/TeamPass 23 https://github.com/eclipse/jetty.project 23 https://github.com/livehelperchat/livehelperchat 23 https://github.com/PrestaShop/PrestaShop 23 https://github.com/helm/helm 22 https://github.com/getkirby/kirby 22 https://github.com/zitadel/zitadel 22 https://github.com/jenkinsci/script-security-plugin 22 https://github.com/hashicorp/consul 22 https://github.com/nervosnetwork/ckb 22 https://github.com/bytecodealliance/wasmtime 22 https://github.com/PHPOffice/PhpSpreadsheet 22 https://github.com/laravel/framework 21 https://github.com/undertow-io/undertow 21 https://github.com/OpenZeppelin/openzeppelin-contracts 21 https://github.com/goharbor/harbor 21 https://github.com/opencast/opencast 20 https://github.com/simplesamlphp/simplesamlphp 20 https://github.com/ethyca/fides 20 https://github.com/dnnsoftware/Dnn.Platform 20 https://github.com/OpenNMS/opennms 20 https://github.com/funadmin/funadmin 20 https://github.com/jeecgboot/jeecg-boot 20 https://github.com/nilsteampassnet/teampass 19 https://github.com/hashicorp/vault 19 https://github.com/cloudfoundry/uaa 19 https://github.com/TYPO3-CMS/core 19 https://github.com/alkacon/opencms-core 19 https://github.com/intelliants/subrion 19 https://github.com/huggingface/transformers 19 https://github.com/backstage/backstage 19 https://github.com/apache/camel 18 https://github.com/rubygems/rubygems 18 https://github.com/vaadin/platform 18 https://github.com/ethereum/go-ethereum 17 https://github.com/apache/kylin 17 https://github.com/containerd/containerd 17 https://github.com/vantage6/vantage6 17 https://github.com/openfga/openfga 17 https://github.com/liufee/cms 17 https://github.com/mindsdb/mindsdb 17 https://github.com/OpenMage/magento-lts 17 https://github.com/dotnet/aspnetcore 16 https://github.com/sequelize/sequelize 16 https://github.com/quarkusio/quarkus 16 https://github.com/hashicorp/nomad 16 https://github.com/etcd-io/etcd 16 https://github.com/pyca/cryptography 16 https://github.com/yetiforcecompany/yetiforcecrm 16 https://github.com/rusqlite/rusqlite 16 https://github.com/tinymce/tinymce 16 https://github.com/forkcms/forkcms 16 https://github.com/dompdf/dompdf 15 https://github.com/OPCFoundation/UA-.NETStandard 15 https://github.com/centreon/centreon 15 https://github.com/thorsten/phpMyFAQ 15 https://github.com/containers/podman 15 https://github.com/zendframework/zendframework 15 https://github.com/decidim/decidim 15 https://github.com/MobSF/Mobile-Security-Framework-MobSF 15 https://github.com/PHPMailer/PHPMailer 15 https://github.com/nodejs/undici 15 https://github.com/cobbler/cobbler 15 https://github.com/ckeditor/ckeditor4 15 https://github.com/aio-libs/aiohttp 15 https://github.com/xuxueli/xxl-job 15 https://github.com/puppetlabs/puppet 15 https://github.com/drupal/core 15 https://github.com/vitejs/vite 15 https://github.com/spring-projects/spring-security 14 https://github.com/rails/rails-html-sanitizer 14 https://github.com/pimcore/admin-ui-classic-bundle 14 https://github.com/apache/zeppelin 14 https://github.com/TryGhost/Ghost 14 https://github.com/golang/go 14 https://github.com/cosmos/cosmos-sdk 14 https://github.com/twisted/twisted 14 https://github.com/apache/superset 14 https://github.com/pgadmin-org/pgadmin4 14 https://github.com/cockpit-hq/cockpit 14 https://github.com/urllib3/urllib3 14 https://github.com/publify/publify 14 https://github.com/Graylog2/graylog2-server 14 https://github.com/janeczku/calibre-web 14 https://github.com/dpgaspar/Flask-AppBuilder 14 https://github.com/1Panel-dev/1Panel 13 https://github.com/swagger-api/swagger-ui 13 https://github.com/OpenRefine/OpenRefine 13 https://github.com/laurent22/joplin 13 https://github.com/opencontainers/runc 13 https://github.com/dromara/hutool 13 https://github.com/ming-soft/MCMS 13 https://github.com/zenml-io/zenml 13 https://github.com/apache/dolphinscheduler 13 https://github.com/modoboa/modoboa 13 https://github.com/h2oai/h2o-3 12 https://sourceforge.net/projects/phpmyadmin.sourceforge.net 12 https://github.com/puma/puma 12 https://github.com/wagtail/wagtail 12 https://github.com/centreon/centreon-archived 12 https://github.com/ImageMagick/ImageMagick 12 https://github.com/smarty-php/smarty 12 https://github.com/VulnSageAgent/PoCs 12 https://github.com/DSpace/DSpace 12 https://github.com/codeigniter4/CodeIgniter4 12 https://github.com/getsentry/sentry 12 https://github.com/igniterealtime/Openfire 12