vllm
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-7141 | 0.1 ; 0.2 ; 0.3 ; … | vLLM KV Block kv_cache_interface.py has_mamba_layers uninitialized resource | MEDIUM 6.3 | 0.3 % | ||
| CVE-2024-8939 | < 0.5.0.post1 | Vllm: denials of service in vllm json web api | MEDIUM 6.2 | 0.2 % | ||
| CVE-2024-8768 | < 0.5.5 | Vllm: a completions api request with an empty prompt will crash the vllm api server. | HIGH 7.5 | 0.7 % |