Vllm-project vulnerabilities
125 CVEs and advisories name Vllm-project as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-9053Remote Code Execution in vllm-project/vllm
- CVE-2025-29783vLLM Allows Remote Code Execution via Mooncake Integration
- CVE-2025-29770vLLM denial of service via outlines unbounded cache on disk
- CVE-2025-25183vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache
- CVE-2025-24357vLLM allows a malicious model RCE by torch.load in hf_model_weights_iterator