Threats tagged 'ghsa-fj8v-85jv-jwpv'

A race condition vulnerability exists in vllm-project vllm versions 0.30.0 and 0.31.0 in the Common Prefix Handler component. The flaw is located in the file single_type_kv_cache_manager.py and can be exploited remotely. Exploitation is considered highly complex and difficult. Public exploit code is available. Upgrading to version 0.32.0 resolves the issue.