vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumption

vLLM before 0.27.0 Denial of Service via DeepStream Backend

vLLM: Cross-User Data Leak Vulnerability

vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts

vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of CVE-2026-55574

vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router

vllm-project vllm OpenAI-compatible Serving Path denial of service

Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations

vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service

vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds

vLLM through 0.29.0 Cross-Request Logits Corruption via bad_words

vllm-project vllm thinking_budget_state.py algorithmic complexity

vllm-project vLLM Jinja Template Rendering completions resource consumption

vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds

vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`

vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense

vllm-project vLLM tiktoken vocab File mod.rs new denial of service

vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle

vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel

vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache