High
CVE-2026-22807
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 100
Reset filters
High
CVE-2025-66448
vLLM vulnerable to remote code execution via transformers_utils/get_config
High
CVE-2025-62372
vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs
High
CVE-2025-62164
vLLM deserialization vulnerability leading to DoS and potential RCE
Medium
CVE-2025-62426
vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`
High
CVE-2025-59425
vLLM is vulnerable to timing attack at bearer auth
Medium
CVE-2025-61620
vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server
High
CVE-2025-6242
vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class
High
CVE-2025-48956
vllm API endpoints vulnerable to Denial of Service Attacks
High
CVE-2025-9141
vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder
Medium
CVE-2025-48944
vLLM Tool Schema allows DoS via Malformed pattern and type Fields
High
CVE-2025-30165
Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration
Medium
CVE-2025-46560
vLLM: Quadratic Time Complexity in Input Token Processing leads to denial of service
High
CVE-2025-30202
Data exposure via ZeroMQ on multi-node vLLM deployment
Medium
CVE-2024-8939
vLLM Denial of Service via the best_of parameter
High
CVE-2024-8768
vLLM denial of service vulnerability
High
CVE-2026-55574
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
High
CVE-2026-55514
vLLM denial of service via prompt embeds on M-RoPE models
Medium
CVE-2026-55646
vLLM: Speech-to-text upload size limit is enforced after full UploadFile read
Critical
CVE-2026-22778
vLLM has RCE In Video Processing
Critical
CVE-2025-65015
joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
Critical
CVE-2025-47277
vLLM Allows Remote Code Execution via PyNcclPipe Communication Service
Critical
CVE-2024-11041
vLLM Deserialization of Untrusted Data vulnerability
Critical
CVE-2024-9052
vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.