Threats tagged 'ghsa-8qpc-6rxx-4pxf'

vLLM versions up to 0.29.0 have a denial of service vulnerability in the P2P KV offloading feature when configured with TieringOffloadingSpec and a peer-to-peer secondary tier. Attackers can cause the system to crash by supplying arbitrary unreachable remote host and port values, exhausting context quotas and triggering an uncaught error that stops all inference.