Threats tagged 'ghsa-526f-298v-f597'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.4%	CVE-2026-100648vllm · Uncontrolled Resource Consumption Medium6.9EPSS 0.4%2026-09-26CVE Database V5CVE-2026-100648 vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat audio decoding, allowing unauthenticated clients to bypass file size restrictions. Attackers can submit oversized audio files through chat endpoints to consume excessive memory and CPU resources during decoding. EPSS 0.4%Vulnerability vllm-project #ghsa-526f-298v-f597	CVE Database V5	2026-09-26

Page 1 of 1