agentprime: vllmEvery new CVE for vllm.https://agentprime.io/CVE-2026-116181: vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_idshttps://agentprime.io/advisories/CVE-2026-116181/https://agentprime.io/advisories/CVE-2026-116181/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:19 GMTCVECVE-2026-116180: vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensorshttps://agentprime.io/advisories/CVE-2026-116180/https://agentprime.io/advisories/CVE-2026-116180/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:19 GMTCVECVE-2026-116179: vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Overridehttps://agentprime.io/advisories/CVE-2026-116179/https://agentprime.io/advisories/CVE-2026-116179/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:18 GMTCVECVE-2026-116175: vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completionshttps://agentprime.io/advisories/CVE-2026-116175/https://agentprime.io/advisories/CVE-2026-116175/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:15 GMTCVECVE-2026-116174: vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generatehttps://agentprime.io/advisories/CVE-2026-116174/https://agentprime.io/advisories/CVE-2026-116174/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:15 GMTCVECVE-2026-116172: vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_nhttps://agentprime.io/advisories/CVE-2026-116172/https://agentprime.io/advisories/CVE-2026-116172/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:13 GMTCVECVE-2026-114051: vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generatehttps://agentprime.io/advisories/CVE-2026-114051/https://agentprime.io/advisories/CVE-2026-114051/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:28 GMTCVECVE-2026-114049: vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condensehttps://agentprime.io/advisories/CVE-2026-114049/https://agentprime.io/advisories/CVE-2026-114049/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:26 GMTCVECVE-2026-109311: vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Uploadhttps://agentprime.io/advisories/CVE-2026-109311/https://agentprime.io/advisories/CVE-2026-109311/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:06 GMTCVECVE-2026-105775: vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-boundshttps://agentprime.io/advisories/CVE-2026-105775/https://agentprime.io/advisories/CVE-2026-105775/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 05:45:11 GMTCVECVE-2026-100654: vLLM before 0.29.0 Denial of Service via out-of-range stop_token_idshttps://agentprime.io/advisories/CVE-2026-100654/https://agentprime.io/advisories/CVE-2026-100654/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:23 GMTCVECVE-2026-100651: vllm before 0.29.0 Denial of Service via Decoder Prompt Length Bypasshttps://agentprime.io/advisories/CVE-2026-100651/https://agentprime.io/advisories/CVE-2026-100651/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:21 GMTCVECVE-2026-100649: vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclasshttps://agentprime.io/advisories/CVE-2026-100649/https://agentprime.io/advisories/CVE-2026-100649/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:19 GMTCVECVE-2026-100648: vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decodinghttps://agentprime.io/advisories/CVE-2026-100648/https://agentprime.io/advisories/CVE-2026-100648/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:18 GMTCVECVE-2026-100647: vLLM before 0.29.0 CPU Exhaustion via unbounded cache_salthttps://agentprime.io/advisories/CVE-2026-100647/https://agentprime.io/advisories/CVE-2026-100647/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:18 GMTCVECVE-2026-94627: vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collisionhttps://agentprime.io/advisories/CVE-2026-94627/https://agentprime.io/advisories/CVE-2026-94627/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 22:04:16 GMTCVECVE-2026-92365: vllm-project vllm thinking_budget_state.py algorithmic complexityhttps://agentprime.io/advisories/CVE-2026-92365/https://agentprime.io/advisories/CVE-2026-92365/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:00:08 GMTCVECVE-2026-92220: vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumptionhttps://agentprime.io/advisories/CVE-2026-92220/https://agentprime.io/advisories/CVE-2026-92220/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 02:15:10 GMTCVECVE-2026-90878: vllm-project vLLM Jinja Template Rendering completions resource consumptionhttps://agentprime.io/advisories/CVE-2026-90878/https://agentprime.io/advisories/CVE-2026-90878/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 04:15:11 GMTCVECVE-2026-90713: vllm-project vLLM tiktoken vocab File mod.rs new denial of servicehttps://agentprime.io/advisories/CVE-2026-90713/https://agentprime.io/advisories/CVE-2026-90713/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 12:00:10 GMTCVECVE-2026-90555: vLLM before 0.28.0 Denial of Service via Audio Headerhttps://agentprime.io/advisories/CVE-2026-90555/https://agentprime.io/advisories/CVE-2026-90555/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:58 GMTCVECVE-2026-90554: vLLM before 0.28.0 Denial of Service via audio extractionhttps://agentprime.io/advisories/CVE-2026-90554/https://agentprime.io/advisories/CVE-2026-90554/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:57 GMTCVE