Threats tagged 'pysec-2026-4353'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 0.3%	CVE-2026-116178vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the High8.2EPSS 0.3%2026-10-25GCVE DatabaseCVE-2026-116178 vLLM versions from 0.20.0 up to but not including 0.30.0 contain a denial of service vulnerability. Remote attackers can crash the engine by sending malformed multimodal metadata to the /inference/v1/generate endpoint. This causes a negative text span in Qwen2.5-VL position construction, terminating the engine. The issue is fixed in version 0.30.0. EPSS 0.3%Report on CVE-2026-116178 Vulnerability #pysec-2026-4353 #pypi	GCVE Database	2026-10-25

Page 1 of 1