vllm-project vllm-project/vllm
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-5497 | unspecified – < 0.19.0 | Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm | HIGH 7.5 | 0.5 % | ||
| CVE-2026-4944 | unspecified – latest | Hardcoded trust_remote_code=True in vllm-project/vllm Bypasses User Security Control | HIGH 8.8 | 0.7 % | ||
| CVE-2024-11041 | unspecified – latest | Remote Code Execution in vllm-project/vllm | CRITICAL 9.8 | 1.7 % | ||
| CVE-2024-9053 | unspecified – latest | Remote Code Execution in vllm-project/vllm | CRITICAL 9.8 | 1.4 % |