Threats tagged 'pysec-2026-4349'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.4%	CVE-2026-115918Vllm: From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an Medium6.5EPSS 0.4%2026-10-26GCVE DatabaseCVE-2026-115918 vLLM versions from 0.16.0 up to but not including 0.32.0 contain a vulnerability in the /v1/responses endpoint. An authenticated user can supply a crafted template in chat_template_kwargs[chat_template] when no server template is configured. This bypasses the intended trust policy and may cause CPU or memory exhaustion due to Jinja template rendering. The issue is resolved in version 0.32.0. EPSS 0.4%Report on CVE-2026-115918 Vulnerability #pysec-2026-4349 #pypi	GCVE Database	2026-10-26

Page 1 of 1