V
Üretici güvenlik profili
vllm-project
Ürün portföyü, yama kanıtları ve sömürü sinyalleri tek güvenlik karnesinde
Veriler CVE Programı, NVD, CISA KEV ve üretici güvenlik bültenlerinden birleştirilir.
Toplam CVE53
Kritik1
CISA KEV0
Public exploit19
Yama oranı%75
Ort. CVSS6.6
12 aylık açık hızı
0
0
0
0
0
2
0
2
0
8
29
12
CVE KEV
CVE önem dağılımı
53toplam CVE
Kritik1 (2%)
Yüksek16 (30%)
Orta34 (64%)
Düşük2 (4%)
Yama ve sömürü görünümü
%75
Doğrulanmış yama
%0
CISA KEV
%36
Public exploit
40Yama var
0Kısmi
0Geçici çözüm
0Üretici: yama yok
13Bilinmiyor
Son güvenlik açıkları
7.1
CVE-2026-109311
vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload
V
Yama durumu bilinmiyorEPSS %0
5.3
CVE-2026-105922
vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service
V
Yama durumu bilinmiyorEPSS %0
5.3
CVE-2026-105775
vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
V
Yama durumu bilinmiyorEPSS %0
5.3
CVE-2026-105760
vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion
V
Yama doğrulandıEPSS %0
5.9
CVE-2026-105759
vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)
V
Yama durumu bilinmiyorEPSS %0
5.3
CVE-2026-105758
vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach
V
Yama doğrulandıEPSS %0
6.5
CVE-2026-105757
vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)
V
Yama doğrulandıEPSS %0
6.5
CVE-2026-105756
vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service
V
Yama doğrulandıEPSS %0
4.2
CVE-2026-105755
vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`
V
Yama doğrulandıEPSS %0
6.5
CVE-2026-105754
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
V
Yama doğrulandıEPSS %0