rpm package
opensuse/python-vllm&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/python-vllm&distro=openSUSE%20Tumbleweed
Vulnerabilities (6)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-105922 | Med | 4.3 | < 0.30.0-2.1 | 0.30.0-2.1 | Oct 6, 2026 | A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/utils.py of the component Penalty Handler. Performing a manipulation results in denial of service. Remote exploita | |
| CVE-2026-105775 | Med | 4.3 | < 0.30.0-2.1 | 0.30.0-2.1 | Oct 6, 2026 | A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The at | |
| CVE-2026-93989 | Low | 3.1 | < 0.30.0-1.1 | 0.30.0-1.1 | Sep 19, 2026 | vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in SamplingParams.update_from_tokenizer(). Attackers can supply out-of-bounds token indices that corrupt logits memory of concurrent requests, causing different in-f | |
| CVE-2026-93841 | Low | 3.7 | < 0.30.0-1.1 | 0.30.0-1.1 | Sep 18, 2026 | vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocab | |
| CVE-2026-92365 | Med | 4.3 | < 0.30.0-1.1 | 0.30.0-1.1 | Sep 16, 2026 | A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulation results in inefficient algorithmic complexity. It is possible to launch the attack remotely. The | |
| CVE-2026-90713 | Low | 3.3 | < 0.30.0-1.1 | 0.30.0-1.1 | Sep 14, 2026 | A security flaw has been discovered in vllm-project vLLM up to 0.29.0. The affected element is the function TiktokenTokenizer::new of the file rust/src/text/src/backend/hf/mod.rs of the component tiktoken vocab File Handler. The manipulation results in denial of service. The atta |
- affected < 0.30.0-2.1fixed 0.30.0-2.1
A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/utils.py of the component Penalty Handler. Performing a manipulation results in denial of service. Remote exploita
- affected < 0.30.0-2.1fixed 0.30.0-2.1
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The at
- affected < 0.30.0-1.1fixed 0.30.0-1.1
vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generation output width in SamplingParams.update_from_tokenizer(). Attackers can supply out-of-bounds token indices that corrupt logits memory of concurrent requests, causing different in-f
- affected < 0.30.0-1.1fixed 0.30.0-1.1
vLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel where prompt token IDs index the penalty prompt-presence bitset without bounds checking against vocabulary size. Attackers can submit multimodal audio requests with tokens equal to vocab
- affected < 0.30.0-1.1fixed 0.30.0-1.1
A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulation results in inefficient algorithmic complexity. It is possible to launch the attack remotely. The
- affected < 0.30.0-1.1fixed 0.30.0-1.1
A security flaw has been discovered in vllm-project vLLM up to 0.29.0. The affected element is the function TiktokenTokenizer::new of the file rust/src/text/src/backend/hf/mod.rs of the component tiktoken vocab File Handler. The manipulation results in denial of service. The atta