Daily Neural Digest
Back to AI Stack Advisories
stack advisoriesstack-advisoriessecuritysupply-chain

AI stack advisories — vulnerabilities OSV published for the packages you run

Every security advisory OSV published in the last 60 days for 25 packages used in AI stacks (torch, transformers, vLLM, langchain, gradio, aiohttp and more): identifiers, affected and fixed versions, read from the API and not written by a model.

FTL LabNovember 5, 202668 min read13 475 words

What this page is

Once a day we ask the OSV database — the vulnerability database maintained by Google, which aggregates GitHub Security Advisories, PyPA advisories, the NVD and others — what it has published in the last 60 days for 25 packages that show up in AI stacks. This page is the answer, unedited: identifiers, summaries, affected version ranges and fixed versions exactly as the API returns them. No language model writes anything here, and no human reviews it before publication.

Two things this page deliberately does not do. It does not rate anything: when OSV carries no severity field for an entry — which happens often, the PYSEC records in particular — the line below says so instead of guessing. And it does not tell you whether a flaw is exploitable in your deployment: that depends on how you call the library, and nobody but you can answer it.

The most recent advisory in this batch was published on 2026-10-28. GHSA-gq5q-89c7-vhvx is the newest entry; the full list follows.

Advisories published in the last 60 days

Published Package Identifier Affected versions Fixed in Link
2026-10-28 vllm (PyPI) GHSA-gq5q-89c7-vhvx — CVE-2026-115914 >= 0.11.1 < 0.32.0 ; enumerated versions: 0.11.1, 0.11.2, 0.12.0, … (+29 more listed by the source) 0.32.0 GHSA-gq5q-89c7-vhvx
2026-10-28 vllm (PyPI) GHSA-8397-8qf6-f2gm — CVE-2026-115913 all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source) 0.32.0 GHSA-8397-8qf6-f2gm
2026-10-27 vllm (PyPI) GHSA-h3rc-6mm3-gc2m — CVE-2026-114053 >= 0.7.3 < 0.31.0 ; enumerated versions: 0.10.0, 0.10.1, 0.10.1.1, … (+45 more listed by the source) 0.31.0 GHSA-h3rc-6mm3-gc2m
2026-10-26 vllm (PyPI) GHSA-x567-49g5-p4cf — CVE-2026-115918 >= 0.16.0 < 0.32.0 ; enumerated versions: 0.16.0, 0.17.0, 0.17.1, … (+21 more listed by the source) 0.32.0 GHSA-x567-49g5-p4cf
2026-10-26 vllm (PyPI) GHSA-vvpg-rrww-wpmh — CVE-2026-115917 all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source) 0.32.0 GHSA-vvpg-rrww-wpmh
2026-10-26 vllm (PyPI) GHSA-q97c-p368-75c4 — CVE-2026-115916 all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source) 0.32.0 GHSA-q97c-p368-75c4
2026-10-26 vllm (PyPI) GHSA-h3rc-j82p-2c3h — CVE-2026-115915 all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source) 0.32.0 GHSA-h3rc-j82p-2c3h
2026-10-26 vllm (PyPI) GHSA-6757-hggm-hp2w — CVE-2026-115912 all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source) 0.32.0 GHSA-6757-hggm-hp2w
2026-10-26 vllm (PyPI) GHSA-542m-9234-8gvf — CVE-2026-115911 >= 0.19.0 < 0.32.0 ; enumerated versions: 0.19.0, 0.19.1, 0.20.0, … (+16 more listed by the source) 0.32.0 GHSA-542m-9234-8gvf
2026-10-25 vllm (PyPI) PYSEC-2026-4353 — CVE-2026-116178 >= 0.20.0 < 0.30.0 ; enumerated versions: 0.20.0, 0.20.1, 0.20.2, … (+12 more listed by the source) 0.30.0 PYSEC-2026-4353
2026-10-25 vllm (PyPI) PYSEC-2026-4352 — CVE-2026-116177 >= 0.10.2 < 0.25.0 ; enumerated versions: 0.10.2, 0.11.0, 0.11.1, … (+22 more listed by the source) 0.25.0 PYSEC-2026-4352
2026-10-25 vllm (PyPI) PYSEC-2026-4351 — CVE-2026-116176 >= 0.9.2 < 0.24.0 ; enumerated versions: 0.10.0, 0.10.1, 0.10.1.1, … (+25 more listed by the source) 0.24.0 PYSEC-2026-4351
2026-10-25 vllm (PyPI) PYSEC-2026-4350 — CVE-2026-116173 >= 0.22.0 < 0.24.0 ; enumerated versions: 0.22.0, 0.22.1, 0.23.0 0.24.0 PYSEC-2026-4350
2026-10-23 vllm (PyPI) GHSA-p92p-rxj5-7p2x — CVE-2026-114050 all versions < 0.31.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+95 more listed by the source) 0.31.0 GHSA-p92p-rxj5-7p2x
2026-10-23 vllm (PyPI) GHSA-gx7p-2j49-hfq4 — CVE-2026-114055 >= 0.7.3 < 0.31.0 ; enumerated versions: 0.10.0, 0.10.1, 0.10.1.1, … (+45 more listed by the source) 0.31.0 GHSA-gx7p-2j49-hfq4
2026-10-22 pillow (PyPI) GHSA-mrfp-p49p-3hf2 — CVE-2026-96640 >= 5.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+46 more listed by the source) 13.0.0 GHSA-mrfp-p49p-3hf2
2026-10-22 pillow (PyPI) GHSA-g7cr-3p24-7wf7 — CVE-2026-96778 >= 9.4.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+14 more listed by the source) 13.0.0 GHSA-g7cr-3p24-7wf7
2026-10-22 pillow (PyPI) GHSA-78g4-xqwv-q3g8 >= 11.1.0 < 13.0.0 ; enumerated versions: 11.1.0, 11.2.1, 11.3.0, … (+5 more listed by the source) 13.0.0 GHSA-78g4-xqwv-q3g8
2026-10-22 pillow (PyPI) GHSA-24rc-8hj2-v98c — CVE-2026-96638 >= 9.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+18 more listed by the source) 13.0.0 GHSA-24rc-8hj2-v98c
2026-10-21 vllm (PyPI) PYSEC-2026-4362 — CVE-2026-114054 all versions < 0.31.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+95 more listed by the source) 0.31.0 PYSEC-2026-4362
2026-10-21 vllm (PyPI) PYSEC-2026-4361 — CVE-2026-114052 >= 0.24.0 < 0.31.0 ; enumerated versions: 0.24.0, 0.25.0, 0.25.1, … (+6 more listed by the source) 0.31.0 PYSEC-2026-4361
2026-10-21 pillow (PyPI) GHSA-xvh5-g6gv-559v — CVE-2026-112902 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-xvh5-g6gv-559v
2026-10-21 pillow (PyPI) GHSA-w889-685w-c8fh — CVE-2026-112900 >= 2.6.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+75 more listed by the source) 13.0.0 GHSA-w889-685w-c8fh
2026-10-21 pillow (PyPI) GHSA-v9pv-5gc8-w2m6 — CVE-2026-96639 >= 11.0.0 < 13.0.0 ; enumerated versions: 11.0.0, 11.1.0, 11.2.1, … (+6 more listed by the source) 13.0.0 GHSA-v9pv-5gc8-w2m6
2026-10-21 pillow (PyPI) GHSA-rfgq-q3w2-pmv2 — CVE-2026-112898 >= 9.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+18 more listed by the source) 13.0.0 GHSA-rfgq-q3w2-pmv2
2026-10-21 pillow (PyPI) GHSA-p8hx-v2p6-rp84 — CVE-2026-96636 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-p8hx-v2p6-rp84
2026-10-21 pillow (PyPI) GHSA-jg86-v3jv-hrpm — CVE-2026-112894 >= 5.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+46 more listed by the source) 13.0.0 GHSA-jg86-v3jv-hrpm
2026-10-21 pillow (PyPI) GHSA-j4m9-6w36-pw47 — CVE-2026-112893 >= 10.0.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+12 more listed by the source) 13.0.0 GHSA-j4m9-6w36-pw47
2026-10-21 pillow (PyPI) GHSA-gg2r-wvfm-q9rx — CVE-2026-112892 >= 4.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+52 more listed by the source) 13.0.0 GHSA-gg2r-wvfm-q9rx
2026-10-21 pillow (PyPI) GHSA-g842-9rc4-69pw — CVE-2026-96637 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-g842-9rc4-69pw
2026-10-21 pillow (PyPI) GHSA-g4qv-2jxx-769h — CVE-2026-96643 >= 11.0.0 < 13.0.0 ; enumerated versions: 11.0.0, 11.1.0, 11.2.1, … (+6 more listed by the source) 13.0.0 GHSA-g4qv-2jxx-769h
2026-10-21 pillow (PyPI) GHSA-fc9g-5qg7-mf45 — CVE-2026-112891 >= 9.2.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+16 more listed by the source) 13.0.0 GHSA-fc9g-5qg7-mf45
2026-10-21 pillow (PyPI) GHSA-f2g6-542v-9j58 — CVE-2026-112406 >= 5.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+46 more listed by the source) 13.0.0 GHSA-f2g6-542v-9j58
2026-10-21 pillow (PyPI) GHSA-9v9v-9qvf-h2hj — CVE-2026-96644 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-9v9v-9qvf-h2hj
2026-10-21 pillow (PyPI) GHSA-74r2-7ff9-mjj2 — CVE-2026-112401 >= 5.4.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+42 more listed by the source) 13.0.0 GHSA-74r2-7ff9-mjj2
2026-10-21 pillow (PyPI) GHSA-654x-cwwv-5j9c — CVE-2026-114501 >= 11.2.1 < 13.0.0 ; enumerated versions: 11.2.1, 11.3.0, 12.0.0, … (+4 more listed by the source) 13.0.0 GHSA-654x-cwwv-5j9c
2026-10-21 pillow (PyPI) GHSA-5xm2-6676-qcp9 — CVE-2026-112399 >= 8.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+28 more listed by the source) 13.0.0 GHSA-5xm2-6676-qcp9
2026-10-21 pillow (PyPI) GHSA-4rm8-3hmm-39fg — CVE-2026-96641 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-4rm8-3hmm-39fg
2026-10-21 pillow (PyPI) GHSA-3j72-p6qg-6xp7 — CVE-2026-96642 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-3j72-p6qg-6xp7
2026-10-21 pillow (PyPI) GHSA-332p-7hrc-92wf — CVE-2026-112393 >= 2.0.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+88 more listed by the source) 13.0.0 GHSA-332p-7hrc-92wf
2026-10-21 pillow (PyPI) GHSA-254f-3936-288h — CVE-2026-112391 >= 5.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+46 more listed by the source) 13.0.0 GHSA-254f-3936-288h
2026-10-21 pillow (PyPI) GHSA-22hg-r758-rrw9 — CVE-2026-112390 >= 7.2.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+31 more listed by the source) 13.0.0 GHSA-22hg-r758-rrw9
2026-10-20 pillow (PyPI) GHSA-vx6w-vv9f-6gvg — CVE-2026-112899 >= 2.3.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+83 more listed by the source) 13.0.0 GHSA-vx6w-vv9f-6gvg
2026-10-20 pillow (PyPI) GHSA-q45j-58j2-45rg — CVE-2026-112897 >= 5.3.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+44 more listed by the source) 13.0.0 GHSA-q45j-58j2-45rg
2026-10-20 pillow (PyPI) GHSA-p4wg-p73j-c528 — CVE-2026-112895 >= 5.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+46 more listed by the source) 13.0.0 GHSA-p4wg-p73j-c528
2026-10-20 pillow (PyPI) GHSA-c6hw-5grf-ff96 — CVE-2026-112404 >= 8.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+28 more listed by the source) 13.0.0 GHSA-c6hw-5grf-ff96
2026-10-20 pillow (PyPI) GHSA-65qm-jvmh-6pqg — CVE-2026-112400 >= 9.2.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+16 more listed by the source) 13.0.0 GHSA-65qm-jvmh-6pqg
2026-10-20 pillow (PyPI) GHSA-462x-pgg6-55fp — CVE-2026-112395 >= 8.2.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+25 more listed by the source) 13.0.0 GHSA-462x-pgg6-55fp
2026-10-20 aiohttp (PyPI) GHSA-pqxq-w44r-73xw — CVE-2026-111750 all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source) 3.14.4 GHSA-pqxq-w44r-73xw
2026-10-20 aiohttp (PyPI) GHSA-gx76-c99x-2c96 — CVE-2026-111749 all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source) 3.14.4 GHSA-gx76-c99x-2c96
2026-10-20 aiohttp (PyPI) GHSA-f9xw-jh8m-3mwq — CVE-2026-111748 all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source) 3.14.4 GHSA-f9xw-jh8m-3mwq
2026-10-20 aiohttp (PyPI) GHSA-9xw5-w5jj-pvcg — CVE-2026-111066 >= 2.0.0 < 3.14.4 ; enumerated versions: 2.0.0, 2.0.1, 2.0.2, … (+202 more listed by the source) 3.14.4 GHSA-9xw5-w5jj-pvcg
2026-10-20 aiohttp (PyPI) GHSA-6cjc-53gc-5rqm — CVE-2026-111065 all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source) 3.14.4 GHSA-6cjc-53gc-5rqm
2026-10-19 pillow (PyPI) GHSA-xgh8-jp6q-p5x8 — CVE-2026-112901 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-xgh8-jp6q-p5x8
2026-10-19 pillow (PyPI) GHSA-pchr-8j38-3x4p — CVE-2026-112896 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-pchr-8j38-3x4p
2026-10-19 pillow (PyPI) GHSA-cp9v-662q-vvx9 — CVE-2026-112405 >= 12.0.0 < 13.0.0 ; enumerated versions: 12.0.0, 12.1.0, 12.1.1, 12.2.0, 12.3.0 13.0.0 GHSA-cp9v-662q-vvx9
2026-10-19 pillow (PyPI) GHSA-8g5g-8vmr-9782 — CVE-2026-112403 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-8g5g-8vmr-9782
2026-10-19 pillow (PyPI) GHSA-7mwm-ghpf-9vrm — CVE-2026-112402 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-7mwm-ghpf-9vrm
2026-10-19 pillow (PyPI) GHSA-5x8w-8jj5-q52h — CVE-2026-112398 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-5x8w-8jj5-q52h
2026-10-19 pillow (PyPI) GHSA-58r4-6rv3-gfh8 — CVE-2026-112397 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-58r4-6rv3-gfh8
2026-10-19 pillow (PyPI) GHSA-4rr5-89j8-mwwm — CVE-2026-112396 >= 11.3.0 < 13.0.0 ; enumerated versions: 11.3.0, 12.0.0, 12.1.0, 12.1.1, 12.2.0, 12.3.0 13.0.0 GHSA-4rr5-89j8-mwwm
2026-10-19 pillow (PyPI) GHSA-4558-3h8r-v8xp — CVE-2026-112394 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-4558-3h8r-v8xp
2026-10-19 pillow (PyPI) GHSA-27h8-gf7j-v5hc — CVE-2026-112392 all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source) 13.0.0 GHSA-27h8-gf7j-v5hc
2026-10-19 aiohttp (PyPI) GHSA-5wr8-gcqf-gqf3 — CVE-2026-111064 all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source) 3.14.4 GHSA-5wr8-gcqf-gqf3
2026-10-19 aiohttp (PyPI) GHSA-494j-54xm-rwp3 — CVE-2026-111063 all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source) 3.14.4 GHSA-494j-54xm-rwp3
2026-10-19 aiohttp (PyPI) GHSA-2g87-pp6c-29x5 all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source) 3.14.4 GHSA-2g87-pp6c-29x5
2026-10-06 vllm (PyPI) PYSEC-2026-4319 — CVE-2026-105922 all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source) 0.32.0 PYSEC-2026-4319
2026-10-06 vllm (PyPI) GHSA-935w-9g4m-p28p — CVE-2026-105752 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 GHSA-935w-9g4m-p28p
2026-10-05 vllm (PyPI) PYSEC-2026-4325 — CVE-2026-105759 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4325
2026-10-05 vllm (PyPI) GHSA-x6mc-67gf-chw4 — CVE-2026-105758 >= 0.24.0 < 0.30.0 ; enumerated versions: 0.24.0, 0.25.0, 0.25.1, … (+5 more listed by the source) 0.30.0 GHSA-x6mc-67gf-chw4
2026-10-05 vllm (PyPI) GHSA-ph72-cqr5-qpp7 — CVE-2026-105754 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 GHSA-ph72-cqr5-qpp7
2026-10-05 vllm (PyPI) GHSA-ph3r-5jfg-f84f — CVE-2026-105753 all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source) 0.28.0 GHSA-ph3r-5jfg-f84f
2026-10-05 vllm (PyPI) GHSA-85xf-c7hm-whqw — CVE-2026-105757 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 GHSA-85xf-c7hm-whqw
2026-10-05 vllm (PyPI) GHSA-58v5-2m8f-94pr — CVE-2026-105760 >= 0.23.0rc2 < 0.30.0 ; enumerated versions: 0.23.0, 0.24.0, 0.25.0, … (+6 more listed by the source) 0.30.0 GHSA-58v5-2m8f-94pr
2026-10-05 vllm (PyPI) GHSA-2phq-3phc-84px — CVE-2026-105755 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 GHSA-2phq-3phc-84px
2026-10-05 vllm (PyPI) GHSA-2823-qmq8-rwvj — CVE-2026-105756 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 GHSA-2823-qmq8-rwvj
2026-10-01 transformers (PyPI) PYSEC-2026-4174 — CVE-2026-80047 >= 4.49.0 <= 5.8.1 ; enumerated versions: 4.49.0, 4.50.0, 4.50.1, … (+52 more listed by the source) not provided by the source PYSEC-2026-4174
2026-10-01 sentence-transformers (PyPI) PYSEC-2026-4164 — CVE-2026-68770 all versions < 5.6.0 ; enumerated versions: 0.1.0, 0.2.0, 0.2.1, … (+75 more listed by the source) 5.6.0 PYSEC-2026-4164
2026-09-30 vllm (PyPI) PYSEC-2026-4186 — CVE-2026-103241 all versions < 0.27.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+90 more listed by the source) 0.27.0 PYSEC-2026-4186
2026-09-26 vllm (PyPI) PYSEC-2026-4324 — CVE-2026-100653 >= 0.22.1 < 0.28.0 ; enumerated versions: 0.22.1, 0.23.0, 0.24.0, … (+5 more listed by the source) 0.28.0 PYSEC-2026-4324
2026-09-26 vllm (PyPI) PYSEC-2026-4185 — CVE-2026-100652 >= 0.22.0 < 0.24.0 ; enumerated versions: 0.22.0, 0.22.1, 0.23.0 0.24.0 PYSEC-2026-4185
2026-09-26 vllm (PyPI) PYSEC-2026-4184 — CVE-2026-100650 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4184
2026-09-21 vllm (PyPI) PYSEC-2026-4008 — CVE-2026-94626 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4008
2026-09-21 vllm (PyPI) PYSEC-2026-4007 — CVE-2026-94625 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4007
2026-09-21 vllm (PyPI) PYSEC-2026-4005 — CVE-2026-94623 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4005
2026-09-21 vllm (PyPI) PYSEC-2026-4004 — CVE-2026-94622 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4004
2026-09-21 vllm (PyPI) GHSA-frvg-qw88-hww9 — CVE-2026-94624 all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source) 0.32.0 GHSA-frvg-qw88-hww9
2026-09-19 vllm (PyPI) PYSEC-2026-4000 — CVE-2026-93989 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4000
2026-09-18 vllm (PyPI) PYSEC-2026-3999 — CVE-2026-93841 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-3999
2026-09-18 vllm (PyPI) PYSEC-2026-3998 — CVE-2026-93840 all versions < 0.29.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+93 more listed by the source) 0.29.0 PYSEC-2026-3998
2026-09-18 vllm (PyPI) PYSEC-2026-3997 — CVE-2026-93592 all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source) 0.28.0 PYSEC-2026-3997
2026-09-17 vllm (PyPI) PYSEC-2026-3996 — CVE-2026-93436 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-3996
2026-09-17 vllm (PyPI) GHSA-8pw2-6jv3-mj5j — CVE-2026-69147 all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source) 0.28.0 GHSA-8pw2-6jv3-mj5j
2026-09-16 vllm (PyPI) GHSA-hcwq-8wjf-3gcr — CVE-2026-57173 all versions < 0.24.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+86 more listed by the source) 0.24.0 GHSA-hcwq-8wjf-3gcr
2026-09-12 vllm (PyPI) PYSEC-2026-3985 — CVE-2026-90553 all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source) 0.28.0 PYSEC-2026-3985
2026-09-10 vllm (PyPI) PYSEC-2026-3938 — CVE-2026-73557 >= 0.21.0 < 0.26.0 ; enumerated versions: 0.21.0, 0.22.0, 0.22.1, … (+4 more listed by the source) 0.26.0 PYSEC-2026-3938
2026-09-10 vllm (PyPI) PYSEC-2026-3937 — CVE-2026-73555 all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source) 0.26.0 PYSEC-2026-3937
2026-09-10 vllm (PyPI) PYSEC-2026-3936 — CVE-2026-71486 all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source) 0.26.0 PYSEC-2026-3936
2026-09-10 vllm (PyPI) PYSEC-2026-3933 — CVE-2026-73556 all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source) 0.26.0 PYSEC-2026-3933
2026-09-10 transformers (PyPI) PYSEC-2026-3929 — CVE-2026-9856 all versions < 5.10.0 ; enumerated versions: 0.1, 2.0.0, 2.1.0, … (+223 more listed by the source) 5.10.0 PYSEC-2026-3929
2026-09-10 accelerate (PyPI) PYSEC-2026-3804 — CVE-2026-69112 all versions <= 1.14.0 ; enumerated versions: 0.0.1, 0.1.0, 0.10.0, … (+79 more listed by the source) not provided by the source PYSEC-2026-3804
2026-09-08 vllm (PyPI) GHSA-7m6h-x95x-82q5 — CVE-2026-73558 all versions < 0.27.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+90 more listed by the source) 0.27.0 GHSA-7m6h-x95x-82q5
2026-09-08 vllm (PyPI) GHSA-4hhp-h66f-j5j7 — CVE-2026-73560 all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source) 0.26.0 GHSA-4hhp-h66f-j5j7

One line per advisory, with the source summary

  • vllm (PyPI), published 2026-10-28 — GHSA-gq5q-89c7-vhvx — severity: MODERATE (database_specific.severity of OSV entry GHSA-gq5q-89c7-vhvx)
    • Summary, quoted from the source: “vLLM DeepSeek-OCR image processing vulnerable to denial of service”
    • Aliases listed by OSV: CVE-2026-115914
    • Affected versions: >= 0.11.1 < 0.32.0 ; enumerated versions: 0.11.1, 0.11.2, 0.12.0, … (+29 more listed by the source)
    • Fixed in: 0.32.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-gq5q-89c7-vhvx
  • vllm (PyPI), published 2026-10-28 — GHSA-8397-8qf6-f2gm — severity: MODERATE (database_specific.severity of OSV entry GHSA-8397-8qf6-f2gm)
    • Summary, quoted from the source: “vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine”
    • Aliases listed by OSV: CVE-2026-115913
    • Affected versions: all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source)
    • Fixed in: 0.32.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-8397-8qf6-f2gm
  • vllm (PyPI), published 2026-10-27 — GHSA-h3rc-6mm3-gc2m — severity: HIGH (database_specific.severity of OSV entry GHSA-h3rc-6mm3-gc2m)
    • Summary, quoted from the source: “vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution”
    • Aliases listed by OSV: CVE-2026-114053
    • Affected versions: >= 0.7.3 < 0.31.0 ; enumerated versions: 0.10.0, 0.10.1, 0.10.1.1, … (+45 more listed by the source)
    • Fixed in: 0.31.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-h3rc-6mm3-gc2m
  • vllm (PyPI), published 2026-10-26 — GHSA-x567-49g5-p4cf, PYSEC-2026-4349 — severity: MODERATE (database_specific.severity of OSV entry GHSA-x567-49g5-p4cf)
    • Summary, quoted from the source: “vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs”
    • Aliases listed by OSV: CVE-2026-115918, PYSEC-2026-4349, GHSA-x567-49g5-p4cf
    • Affected versions: >= 0.16.0 < 0.32.0 ; enumerated versions: 0.16.0, 0.17.0, 0.17.1, … (+21 more listed by the source)
    • Fixed in: 0.32.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-x567-49g5-p4cf
  • vllm (PyPI), published 2026-10-26 — GHSA-vvpg-rrww-wpmh, PYSEC-2026-4348 — severity: LOW (database_specific.severity of OSV entry GHSA-vvpg-rrww-wpmh)
    • Summary, quoted from the source: “vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server”
    • Aliases listed by OSV: CVE-2026-115917, PYSEC-2026-4348, GHSA-vvpg-rrww-wpmh
    • Affected versions: all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source)
    • Fixed in: 0.32.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
    • Source entry: https://osv.dev/vulnerability/GHSA-vvpg-rrww-wpmh
  • vllm (PyPI), published 2026-10-26 — GHSA-q97c-p368-75c4, PYSEC-2026-4347 — severity: MODERATE (database_specific.severity of OSV entry GHSA-q97c-p368-75c4)
    • Summary, quoted from the source: “vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)”
    • Aliases listed by OSV: CVE-2026-115916, PYSEC-2026-4347, GHSA-q97c-p368-75c4
    • Affected versions: all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source)
    • Fixed in: 0.32.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-q97c-p368-75c4
  • vllm (PyPI), published 2026-10-26 — GHSA-h3rc-j82p-2c3h, PYSEC-2026-4346 — severity: HIGH (database_specific.severity of OSV entry GHSA-h3rc-j82p-2c3h)
    • Summary, quoted from the source: “vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE”
    • Aliases listed by OSV: CVE-2026-115915, PYSEC-2026-4346, GHSA-h3rc-j82p-2c3h
    • Affected versions: all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source)
    • Fixed in: 0.32.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-h3rc-j82p-2c3h
  • vllm (PyPI), published 2026-10-26 — GHSA-6757-hggm-hp2w, PYSEC-2026-4345 — severity: HIGH (database_specific.severity of OSV entry GHSA-6757-hggm-hp2w)
    • Summary, quoted from the source: “vLLM: Public multimodal SHM handle forgery reaches worker-side pickle.loads() with insecure serialization disabled”
    • Aliases listed by OSV: CVE-2026-115912, PYSEC-2026-4345, GHSA-6757-hggm-hp2w
    • Affected versions: all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source)
    • Fixed in: 0.32.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-6757-hggm-hp2w
  • vllm (PyPI), published 2026-10-26 — GHSA-542m-9234-8gvf, PYSEC-2026-4344 — severity: MODERATE (database_specific.severity of OSV entry GHSA-542m-9234-8gvf)
    • Summary, quoted from the source: “vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool”
    • Aliases listed by OSV: CVE-2026-115911, PYSEC-2026-4344, GHSA-542m-9234-8gvf
    • Affected versions: >= 0.19.0 < 0.32.0 ; enumerated versions: 0.19.0, 0.19.1, 0.20.0, … (+16 more listed by the source)
    • Fixed in: 0.32.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-542m-9234-8gvf
  • vllm (PyPI), published 2026-10-25 — PYSEC-2026-4353 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-116178, which OSV publishes for the same advisory): “vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders”
    • Aliases listed by OSV: CVE-2026-116178, GHSA-34qw-q2h2-jp3m
    • Affected versions: >= 0.20.0 < 0.30.0 ; enumerated versions: 0.20.0, 0.20.1, 0.20.2, … (+12 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4353
  • vllm (PyPI), published 2026-10-25 — PYSEC-2026-4352 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-116177, which OSV publishes for the same advisory): “vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass”
    • Aliases listed by OSV: CVE-2026-116177, GHSA-mm38-5g96-7j6x
    • Affected versions: >= 0.10.2 < 0.25.0 ; enumerated versions: 0.10.2, 0.11.0, 0.11.1, … (+22 more listed by the source)
    • Fixed in: 0.25.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4352
  • vllm (PyPI), published 2026-10-25 — PYSEC-2026-4351 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-116176, which OSV publishes for the same advisory): “vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector”
    • Aliases listed by OSV: CVE-2026-116176, GHSA-vfp2-c8pq-v6h6
    • Affected versions: >= 0.9.2 < 0.24.0 ; enumerated versions: 0.10.0, 0.10.1, 0.10.1.1, … (+25 more listed by the source)
    • Fixed in: 0.24.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4351
  • vllm (PyPI), published 2026-10-25 — PYSEC-2026-4350 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-116173, which OSV publishes for the same advisory): “vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids”
    • Aliases listed by OSV: CVE-2026-116173, GHSA-6pgw-f3pv-4h8q
    • Affected versions: >= 0.22.0 < 0.24.0 ; enumerated versions: 0.22.0, 0.22.1, 0.23.0
    • Fixed in: 0.24.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4350
  • vllm (PyPI), published 2026-10-23 — GHSA-p92p-rxj5-7p2x — severity: MODERATE (database_specific.severity of OSV entry GHSA-p92p-rxj5-7p2x)
    • Summary, quoted from the source: “vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine”
    • Aliases listed by OSV: CVE-2026-114050
    • Affected versions: all versions < 0.31.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+95 more listed by the source)
    • Fixed in: 0.31.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-p92p-rxj5-7p2x
  • vllm (PyPI), published 2026-10-23 — GHSA-gx7p-2j49-hfq4 — severity: HIGH (database_specific.severity of OSV entry GHSA-gx7p-2j49-hfq4)
    • Summary, quoted from the source: “vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)”
    • Aliases listed by OSV: CVE-2026-114055
    • Affected versions: >= 0.7.3 < 0.31.0 ; enumerated versions: 0.10.0, 0.10.1, 0.10.1.1, … (+45 more listed by the source)
    • Fixed in: 0.31.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-gx7p-2j49-hfq4
  • pillow (PyPI), published 2026-10-22 — GHSA-mrfp-p49p-3hf2 — severity: HIGH (database_specific.severity of OSV entry GHSA-mrfp-p49p-3hf2)
    • Summary, quoted from the source: “Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion”
    • Aliases listed by OSV: BIT-pillow-2026-96640, CVE-2026-96640
    • Affected versions: >= 5.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+46 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-mrfp-p49p-3hf2
  • pillow (PyPI), published 2026-10-22 — GHSA-g7cr-3p24-7wf7 — severity: HIGH (database_specific.severity of OSV entry GHSA-g7cr-3p24-7wf7)
    • Summary, quoted from the source: “Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer”
    • Aliases listed by OSV: BIT-pillow-2026-96778, CVE-2026-96778
    • Affected versions: >= 9.4.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+14 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-g7cr-3p24-7wf7
  • pillow (PyPI), published 2026-10-22 — GHSA-78g4-xqwv-q3g8 — severity: HIGH (database_specific.severity of OSV entry GHSA-78g4-xqwv-q3g8)
    • Summary, quoted from the source: “Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()”
    • Affected versions: >= 11.1.0 < 13.0.0 ; enumerated versions: 11.1.0, 11.2.1, 11.3.0, … (+5 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-78g4-xqwv-q3g8
  • pillow (PyPI), published 2026-10-22 — GHSA-24rc-8hj2-v98c — severity: MODERATE (database_specific.severity of OSV entry GHSA-24rc-8hj2-v98c)
    • Summary, quoted from the source: “Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode”
    • Aliases listed by OSV: BIT-pillow-2026-96638, CVE-2026-96638
    • Affected versions: >= 9.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+18 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-24rc-8hj2-v98c
  • vllm (PyPI), published 2026-10-21 — PYSEC-2026-4362 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-114054, which OSV publishes for the same advisory): “vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys”
    • Aliases listed by OSV: CVE-2026-114054, GHSA-rh6f-3x46-j33q
    • Affected versions: all versions < 0.31.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+95 more listed by the source)
    • Fixed in: 0.31.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4362
  • vllm (PyPI), published 2026-10-21 — PYSEC-2026-4361 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-114052, which OSV publishes for the same advisory): “vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargs”
    • Aliases listed by OSV: CVE-2026-114052, GHSA-823j-m4cj-hmjf
    • Affected versions: >= 0.24.0 < 0.31.0 ; enumerated versions: 0.24.0, 0.25.0, 0.25.1, … (+6 more listed by the source)
    • Fixed in: 0.31.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4361
  • pillow (PyPI), published 2026-10-21 — GHSA-xvh5-g6gv-559v — severity: HIGH (database_specific.severity of OSV entry GHSA-xvh5-g6gv-559v)
    • Summary, quoted from the source: “Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags”
    • Aliases listed by OSV: CVE-2026-112902
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-xvh5-g6gv-559v
  • pillow (PyPI), published 2026-10-21 — GHSA-w889-685w-c8fh — severity: CRITICAL (database_specific.severity of OSV entry GHSA-w889-685w-c8fh)
    • Summary, quoted from the source: “Pillow: Argument Injection in Ghostscript call, potentially leading into RCE”
    • Aliases listed by OSV: BIT-pillow-2026-112900, CVE-2026-112900
    • Affected versions: >= 2.6.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+75 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-w889-685w-c8fh
  • pillow (PyPI), published 2026-10-21 — GHSA-v9pv-5gc8-w2m6, PYSEC-2026-4339 — severity: CRITICAL (database_specific.severity of OSV entry GHSA-v9pv-5gc8-w2m6)
    • Summary, quoted from the source: “Pillow multi-frame loaders can reuse stale native image storage after mode transitions”
    • Aliases listed by OSV: BIT-pillow-2026-96639, CVE-2026-96639, PYSEC-2026-4339, GHSA-v9pv-5gc8-w2m6
    • Affected versions: >= 11.0.0 < 13.0.0 ; enumerated versions: 11.0.0, 11.1.0, 11.2.1, … (+6 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-v9pv-5gc8-w2m6
  • pillow (PyPI), published 2026-10-21 — GHSA-rfgq-q3w2-pmv2 — severity: MODERATE (database_specific.severity of OSV entry GHSA-rfgq-q3w2-pmv2)
    • Summary, quoted from the source: “Pillow: Image.quantize() with empty palette leaks uninitialized stack memory”
    • Aliases listed by OSV: BIT-pillow-2026-112898, CVE-2026-112898
    • Affected versions: >= 9.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+18 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-rfgq-q3w2-pmv2
  • pillow (PyPI), published 2026-10-21 — GHSA-p8hx-v2p6-rp84, PYSEC-2026-4337 — severity: MODERATE (database_specific.severity of OSV entry GHSA-p8hx-v2p6-rp84)
    • Summary, quoted from the source: “Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)”
    • Aliases listed by OSV: BIT-pillow-2026-96636, CVE-2026-96636, PYSEC-2026-4337, GHSA-p8hx-v2p6-rp84
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-p8hx-v2p6-rp84
  • pillow (PyPI), published 2026-10-21 — GHSA-jg86-v3jv-hrpm — severity: HIGH (database_specific.severity of OSV entry GHSA-jg86-v3jv-hrpm)
    • Summary, quoted from the source: “Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)”
    • Aliases listed by OSV: BIT-pillow-2026-112894, CVE-2026-112894
    • Affected versions: >= 5.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+46 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-jg86-v3jv-hrpm
  • pillow (PyPI), published 2026-10-21 — GHSA-j4m9-6w36-pw47 — severity: HIGH (database_specific.severity of OSV entry GHSA-j4m9-6w36-pw47)
    • Summary, quoted from the source: “Pillow: Invalid free in FreeType glyph rendering when a stroker is active”
    • Aliases listed by OSV: BIT-pillow-2026-112893, CVE-2026-112893
    • Affected versions: >= 10.0.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+12 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-j4m9-6w36-pw47
  • pillow (PyPI), published 2026-10-21 — GHSA-gg2r-wvfm-q9rx — severity: HIGH (database_specific.severity of OSV entry GHSA-gg2r-wvfm-q9rx)
    • Summary, quoted from the source: “Pillow: MSP RLE decoder expands a tiny file into unbounded memory”
    • Aliases listed by OSV: BIT-pillow-2026-112892, CVE-2026-112892
    • Affected versions: >= 4.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+52 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-gg2r-wvfm-q9rx
  • pillow (PyPI), published 2026-10-21 — GHSA-g842-9rc4-69pw, PYSEC-2026-4338 — severity: HIGH (database_specific.severity of OSV entry GHSA-g842-9rc4-69pw)
    • Summary, quoted from the source: “Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS”
    • Aliases listed by OSV: BIT-pillow-2026-96637, CVE-2026-96637, PYSEC-2026-4338, GHSA-g842-9rc4-69pw
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-g842-9rc4-69pw
  • pillow (PyPI), published 2026-10-21 — GHSA-g4qv-2jxx-769h, PYSEC-2026-4342 — severity: HIGH (database_specific.severity of OSV entry GHSA-g4qv-2jxx-769h)
    • Summary, quoted from the source: “Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time”
    • Aliases listed by OSV: BIT-pillow-2026-96643, CVE-2026-96643, PYSEC-2026-4342, GHSA-g4qv-2jxx-769h
    • Affected versions: >= 11.0.0 < 13.0.0 ; enumerated versions: 11.0.0, 11.1.0, 11.2.1, … (+6 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-g4qv-2jxx-769h
  • pillow (PyPI), published 2026-10-21 — GHSA-fc9g-5qg7-mf45 — severity: MODERATE (database_specific.severity of OSV entry GHSA-fc9g-5qg7-mf45)
    • Summary, quoted from the source: “Pillow: Quadratic GIF comment copying during save”
    • Aliases listed by OSV: BIT-pillow-2026-112891, CVE-2026-112891
    • Affected versions: >= 9.2.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+16 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-fc9g-5qg7-mf45
  • pillow (PyPI), published 2026-10-21 — GHSA-f2g6-542v-9j58 — severity: HIGH (database_specific.severity of OSV entry GHSA-f2g6-542v-9j58)
    • Summary, quoted from the source: “Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle”
    • Aliases listed by OSV: BIT-pillow-2026-112406, CVE-2026-112406
    • Affected versions: >= 5.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+46 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-f2g6-542v-9j58
  • pillow (PyPI), published 2026-10-21 — GHSA-9v9v-9qvf-h2hj, PYSEC-2026-4343 — severity: HIGH (database_specific.severity of OSV entry GHSA-9v9v-9qvf-h2hj)
    • Summary, quoted from the source: “Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)”
    • Aliases listed by OSV: BIT-pillow-2026-96644, CVE-2026-96644, PYSEC-2026-4343, GHSA-9v9v-9qvf-h2hj
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-9v9v-9qvf-h2hj
  • pillow (PyPI), published 2026-10-21 — GHSA-74r2-7ff9-mjj2 — severity: MODERATE (database_specific.severity of OSV entry GHSA-74r2-7ff9-mjj2)
    • Summary, quoted from the source: “Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()”
    • Aliases listed by OSV: BIT-pillow-2026-112401, CVE-2026-112401
    • Affected versions: >= 5.4.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+42 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-74r2-7ff9-mjj2
  • pillow (PyPI), published 2026-10-21 — GHSA-654x-cwwv-5j9c, PYSEC-2026-4336 — severity: MODERATE (database_specific.severity of OSV entry GHSA-654x-cwwv-5j9c)
    • Summary, quoted from the source: “Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1”
    • Aliases listed by OSV: BIT-pillow-2026-114501, CVE-2026-114501, PYSEC-2026-4336, GHSA-654x-cwwv-5j9c
    • Affected versions: >= 11.2.1 < 13.0.0 ; enumerated versions: 11.2.1, 11.3.0, 12.0.0, … (+4 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-654x-cwwv-5j9c
  • pillow (PyPI), published 2026-10-21 — GHSA-5xm2-6676-qcp9 — severity: HIGH (database_specific.severity of OSV entry GHSA-5xm2-6676-qcp9)
    • Summary, quoted from the source: “Pillow: APNG background disposal allocates full canvas before decompression bomb check”
    • Aliases listed by OSV: BIT-pillow-2026-112399, CVE-2026-112399
    • Affected versions: >= 8.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+28 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-5xm2-6676-qcp9
  • pillow (PyPI), published 2026-10-21 — GHSA-4rm8-3hmm-39fg, PYSEC-2026-4340 — severity: MODERATE (database_specific.severity of OSV entry GHSA-4rm8-3hmm-39fg)
    • Summary, quoted from the source: “Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise”
    • Aliases listed by OSV: BIT-pillow-2026-96641, CVE-2026-96641, PYSEC-2026-4340, GHSA-4rm8-3hmm-39fg
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-4rm8-3hmm-39fg
  • pillow (PyPI), published 2026-10-21 — GHSA-3j72-p6qg-6xp7, PYSEC-2026-4341 — severity: HIGH (database_specific.severity of OSV entry GHSA-3j72-p6qg-6xp7)
    • Summary, quoted from the source: “Pillow: TarIO negative size field causes infinite CPU-spin loop”
    • Aliases listed by OSV: BIT-pillow-2026-96642, CVE-2026-96642, PYSEC-2026-4341, GHSA-3j72-p6qg-6xp7
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-3j72-p6qg-6xp7
  • pillow (PyPI), published 2026-10-21 — GHSA-332p-7hrc-92wf — severity: CRITICAL (database_specific.severity of OSV entry GHSA-332p-7hrc-92wf)
    • Summary, quoted from the source: “Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO”
    • Aliases listed by OSV: BIT-pillow-2026-112393, CVE-2026-112393
    • Affected versions: >= 2.0.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+88 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-332p-7hrc-92wf
  • pillow (PyPI), published 2026-10-21 — GHSA-254f-3936-288h — severity: MODERATE (database_specific.severity of OSV entry GHSA-254f-3936-288h)
    • Summary, quoted from the source: “Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()”
    • Aliases listed by OSV: BIT-pillow-2026-112391, CVE-2026-112391
    • Affected versions: >= 5.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+46 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-254f-3936-288h
  • pillow (PyPI), published 2026-10-21 — GHSA-22hg-r758-rrw9 — severity: HIGH (database_specific.severity of OSV entry GHSA-22hg-r758-rrw9)
    • Summary, quoted from the source: “Pillow: Infinite loop in MIC n_frames when the embedded TIFF”
    • Aliases listed by OSV: BIT-pillow-2026-112390, CVE-2026-112390
    • Affected versions: >= 7.2.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+31 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-22hg-r758-rrw9
  • pillow (PyPI), published 2026-10-20 — GHSA-vx6w-vv9f-6gvg — severity: MODERATE (database_specific.severity of OSV entry GHSA-vx6w-vv9f-6gvg)
    • Summary, quoted from the source: “Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit”
    • Aliases listed by OSV: CVE-2026-112899
    • Affected versions: >= 2.3.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+83 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-vx6w-vv9f-6gvg
  • pillow (PyPI), published 2026-10-20 — GHSA-q45j-58j2-45rg — severity: HIGH (database_specific.severity of OSV entry GHSA-q45j-58j2-45rg)
    • Summary, quoted from the source: “Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips”
    • Aliases listed by OSV: BIT-pillow-2026-112897, CVE-2026-112897
    • Affected versions: >= 5.3.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+44 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-q45j-58j2-45rg
  • pillow (PyPI), published 2026-10-20 — GHSA-p4wg-p73j-c528 — severity: HIGH (database_specific.severity of OSV entry GHSA-p4wg-p73j-c528)
    • Summary, quoted from the source: “Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)”
    • Aliases listed by OSV: BIT-pillow-2026-112895, CVE-2026-112895
    • Affected versions: >= 5.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+46 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-p4wg-p73j-c528
  • pillow (PyPI), published 2026-10-20 — GHSA-c6hw-5grf-ff96 — severity: HIGH (database_specific.severity of OSV entry GHSA-c6hw-5grf-ff96)
    • Summary, quoted from the source: “Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels”
    • Aliases listed by OSV: BIT-pillow-2026-112404, CVE-2026-112404
    • Affected versions: >= 8.1.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+28 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-c6hw-5grf-ff96
  • pillow (PyPI), published 2026-10-20 — GHSA-65qm-jvmh-6pqg — severity: HIGH (database_specific.severity of OSV entry GHSA-65qm-jvmh-6pqg)
    • Summary, quoted from the source: “Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS”
    • Aliases listed by OSV: BIT-pillow-2026-112400, CVE-2026-112400
    • Affected versions: >= 9.2.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+16 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-65qm-jvmh-6pqg
  • pillow (PyPI), published 2026-10-20 — GHSA-462x-pgg6-55fp — severity: MODERATE (database_specific.severity of OSV entry GHSA-462x-pgg6-55fp)
    • Summary, quoted from the source: “Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)”
    • Aliases listed by OSV: BIT-pillow-2026-112395, CVE-2026-112395
    • Affected versions: >= 8.2.0 < 13.0.0 ; enumerated versions: 10.0.0, 10.0.1, 10.1.0, … (+25 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
    • Source entry: https://osv.dev/vulnerability/GHSA-462x-pgg6-55fp
  • aiohttp (PyPI), published 2026-10-20 — GHSA-pqxq-w44r-73xw — severity: MODERATE (database_specific.severity of OSV entry GHSA-pqxq-w44r-73xw)
    • Summary, quoted from the source: “AIOHTTP: Pure-Python parser request smuggling”
    • Aliases listed by OSV: CVE-2026-111750
    • Affected versions: all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source)
    • Fixed in: 3.14.4
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L
    • Source entry: https://osv.dev/vulnerability/GHSA-pqxq-w44r-73xw
  • aiohttp (PyPI), published 2026-10-20 — GHSA-gx76-c99x-2c96 — severity: LOW (database_specific.severity of OSV entry GHSA-gx76-c99x-2c96)
    • Summary, quoted from the source: “AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies”
    • Aliases listed by OSV: CVE-2026-111749
    • Affected versions: all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source)
    • Fixed in: 3.14.4
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-gx76-c99x-2c96
  • aiohttp (PyPI), published 2026-10-20 — GHSA-f9xw-jh8m-3mwq — severity: MODERATE (database_specific.severity of OSV entry GHSA-f9xw-jh8m-3mwq)
    • Summary, quoted from the source: “AIOHTTP: Absolute-form request targets can spoof Request.scheme”
    • Aliases listed by OSV: CVE-2026-111748
    • Affected versions: all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source)
    • Fixed in: 3.14.4
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-f9xw-jh8m-3mwq
  • aiohttp (PyPI), published 2026-10-20 — GHSA-9xw5-w5jj-pvcg — severity: HIGH (database_specific.severity of OSV entry GHSA-9xw5-w5jj-pvcg)
    • Summary, quoted from the source: “AIOHTTP: File descriptor exhaustion in multipart requests”
    • Aliases listed by OSV: CVE-2026-111066
    • Affected versions: >= 2.0.0 < 3.14.4 ; enumerated versions: 2.0.0, 2.0.1, 2.0.2, … (+202 more listed by the source)
    • Fixed in: 3.14.4
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-9xw5-w5jj-pvcg
  • aiohttp (PyPI), published 2026-10-20 — GHSA-6cjc-53gc-5rqm — severity: MODERATE (database_specific.severity of OSV entry GHSA-6cjc-53gc-5rqm)
    • Summary, quoted from the source: “AIOHTTP: Connector pool exhaustion via Max-Age overflow”
    • Aliases listed by OSV: CVE-2026-111065
    • Affected versions: all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source)
    • Fixed in: 3.14.4
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-6cjc-53gc-5rqm
  • pillow (PyPI), published 2026-10-19 — GHSA-xgh8-jp6q-p5x8, PYSEC-2026-4335 — severity: MODERATE (database_specific.severity of OSV entry GHSA-xgh8-jp6q-p5x8)
    • Summary, quoted from the source: “Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes”
    • Aliases listed by OSV: BIT-pillow-2026-112901, CVE-2026-112901, PYSEC-2026-4335, GHSA-xgh8-jp6q-p5x8
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-xgh8-jp6q-p5x8
  • pillow (PyPI), published 2026-10-19 — GHSA-pchr-8j38-3x4p, PYSEC-2026-4334 — severity: HIGH (database_specific.severity of OSV entry GHSA-pchr-8j38-3x4p)
    • Summary, quoted from the source: “Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read”
    • Aliases listed by OSV: BIT-pillow-2026-112896, CVE-2026-112896, PYSEC-2026-4334, GHSA-pchr-8j38-3x4p
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-pchr-8j38-3x4p
  • pillow (PyPI), published 2026-10-19 — GHSA-cp9v-662q-vvx9, PYSEC-2026-4333 — severity: HIGH (database_specific.severity of OSV entry GHSA-cp9v-662q-vvx9)
    • Summary, quoted from the source: “Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0”
    • Aliases listed by OSV: BIT-pillow-2026-112405, CVE-2026-112405, PYSEC-2026-4333, GHSA-cp9v-662q-vvx9
    • Affected versions: >= 12.0.0 < 13.0.0 ; enumerated versions: 12.0.0, 12.1.0, 12.1.1, 12.2.0, 12.3.0
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-cp9v-662q-vvx9
  • pillow (PyPI), published 2026-10-19 — GHSA-8g5g-8vmr-9782, PYSEC-2026-4332 — severity: CRITICAL (database_specific.severity of OSV entry GHSA-8g5g-8vmr-9782)
    • Summary, quoted from the source: “Pillow: Heap buffer overflow in ImagingJpegDecode”
    • Aliases listed by OSV: BIT-pillow-2026-112403, CVE-2026-112403, PYSEC-2026-4332, GHSA-8g5g-8vmr-9782
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-8g5g-8vmr-9782
  • pillow (PyPI), published 2026-10-19 — GHSA-7mwm-ghpf-9vrm, PYSEC-2026-4331 — severity: HIGH (database_specific.severity of OSV entry GHSA-7mwm-ghpf-9vrm)
    • Summary, quoted from the source: “Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform”
    • Aliases listed by OSV: BIT-pillow-2026-112402, CVE-2026-112402, PYSEC-2026-4331, GHSA-7mwm-ghpf-9vrm
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-7mwm-ghpf-9vrm
  • pillow (PyPI), published 2026-10-19 — GHSA-5x8w-8jj5-q52h, PYSEC-2026-4330 — severity: CRITICAL (database_specific.severity of OSV entry GHSA-5x8w-8jj5-q52h)
    • Summary, quoted from the source: “Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution”
    • Aliases listed by OSV: BIT-pillow-2026-112398, CVE-2026-112398, PYSEC-2026-4330, GHSA-5x8w-8jj5-q52h
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-5x8w-8jj5-q52h
  • pillow (PyPI), published 2026-10-19 — GHSA-58r4-6rv3-gfh8, PYSEC-2026-4329 — severity: HIGH (database_specific.severity of OSV entry GHSA-58r4-6rv3-gfh8)
    • Summary, quoted from the source: “Pillow: Out-of-bounds access in _imagingmorph on a zero-width image”
    • Aliases listed by OSV: BIT-pillow-2026-112397, CVE-2026-112397, PYSEC-2026-4329, GHSA-58r4-6rv3-gfh8
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-58r4-6rv3-gfh8
  • pillow (PyPI), published 2026-10-19 — GHSA-4rr5-89j8-mwwm, PYSEC-2026-4328 — severity: MODERATE (database_specific.severity of OSV entry GHSA-4rr5-89j8-mwwm)
    • Summary, quoted from the source: “Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer”
    • Aliases listed by OSV: BIT-pillow-2026-112396, CVE-2026-112396, PYSEC-2026-4328, GHSA-4rr5-89j8-mwwm
    • Affected versions: >= 11.3.0 < 13.0.0 ; enumerated versions: 11.3.0, 12.0.0, 12.1.0, 12.1.1, 12.2.0, 12.3.0
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-4rr5-89j8-mwwm
  • pillow (PyPI), published 2026-10-19 — GHSA-4558-3h8r-v8xp, PYSEC-2026-4327 — severity: MODERATE (database_specific.severity of OSV entry GHSA-4558-3h8r-v8xp)
    • Summary, quoted from the source: “Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size”
    • Aliases listed by OSV: BIT-pillow-2026-112394, CVE-2026-112394, PYSEC-2026-4327, GHSA-4558-3h8r-v8xp
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-4558-3h8r-v8xp
  • pillow (PyPI), published 2026-10-19 — GHSA-27h8-gf7j-v5hc, PYSEC-2026-4326 — severity: HIGH (database_specific.severity of OSV entry GHSA-27h8-gf7j-v5hc)
    • Summary, quoted from the source: “Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images”
    • Aliases listed by OSV: BIT-pillow-2026-112392, CVE-2026-112392, PYSEC-2026-4326, GHSA-27h8-gf7j-v5hc
    • Affected versions: all versions < 13.0.0 ; enumerated versions: 1.0, 1.1, 1.2, … (+104 more listed by the source)
    • Fixed in: 13.0.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-27h8-gf7j-v5hc
  • aiohttp (PyPI), published 2026-10-19 — GHSA-5wr8-gcqf-gqf3 — severity: HIGH (database_specific.severity of OSV entry GHSA-5wr8-gcqf-gqf3)
    • Summary, quoted from the source: “aiohttp server lacks an initial request/header timeout”
    • Aliases listed by OSV: CVE-2026-111064
    • Affected versions: all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source)
    • Fixed in: 3.14.4
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-5wr8-gcqf-gqf3
  • aiohttp (PyPI), published 2026-10-19 — GHSA-494j-54xm-rwp3 — severity: MODERATE (database_specific.severity of OSV entry GHSA-494j-54xm-rwp3)
    • Summary, quoted from the source: “AIOHTTP: Secure attribute not enforced for shared cookie”
    • Aliases listed by OSV: CVE-2026-111063
    • Affected versions: all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source)
    • Fixed in: 3.14.4
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-494j-54xm-rwp3
  • aiohttp (PyPI), published 2026-10-19 — GHSA-2g87-pp6c-29x5 — severity: HIGH (database_specific.severity of OSV entry GHSA-2g87-pp6c-29x5)
    • Summary, quoted from the source: “aiohttp: Multiple instances of excessive or unbounded memory/CPU use”
    • Affected versions: all versions < 3.14.4 ; enumerated versions: 0.1, 0.10.0, 0.10.1, … (+307 more listed by the source)
    • Fixed in: 3.14.4
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-2g87-pp6c-29x5
  • vllm (PyPI), published 2026-10-06 — PYSEC-2026-4319 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-105922, which OSV publishes for the same advisory): “vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service”
    • Aliases listed by OSV: CVE-2026-105922
    • Affected versions: all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source)
    • Fixed in: 0.32.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4319
  • vllm (PyPI), published 2026-10-06 — GHSA-935w-9g4m-p28p, PYSEC-2026-4308 — severity: LOW (database_specific.severity of OSV entry GHSA-935w-9g4m-p28p)
    • Summary, quoted from the source: “vLLM: Harmony tool continuations drop cache_salt — restoring a cross-tenant prefix-cache membership oracle”
    • Aliases listed by OSV: CVE-2026-105752, PYSEC-2026-4308, GHSA-935w-9g4m-p28p
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
    • Source entry: https://osv.dev/vulnerability/GHSA-935w-9g4m-p28p
  • vllm (PyPI), published 2026-10-05 — PYSEC-2026-4325 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-105759, which OSV publishes for the same advisory): “vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)”
    • Aliases listed by OSV: CVE-2026-105759, GHSA-5fj9-pfhr-6j48
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4325
  • vllm (PyPI), published 2026-10-05 — GHSA-x6mc-67gf-chw4, PYSEC-2026-4310 — severity: MODERATE (database_specific.severity of OSV entry GHSA-x6mc-67gf-chw4)
    • Summary, quoted from the source: “vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach”
    • Aliases listed by OSV: CVE-2026-105758, PYSEC-2026-4310, GHSA-x6mc-67gf-chw4
    • Affected versions: >= 0.24.0 < 0.30.0 ; enumerated versions: 0.24.0, 0.25.0, 0.25.1, … (+5 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
    • Source entry: https://osv.dev/vulnerability/GHSA-x6mc-67gf-chw4
  • vllm (PyPI), published 2026-10-05 — GHSA-ph72-cqr5-qpp7, PYSEC-2026-4309 — severity: MODERATE (database_specific.severity of OSV entry GHSA-ph72-cqr5-qpp7)
    • Summary, quoted from the source: “vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features”
    • Aliases listed by OSV: CVE-2026-105754, PYSEC-2026-4309, GHSA-ph72-cqr5-qpp7
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-ph72-cqr5-qpp7
  • vllm (PyPI), published 2026-10-05 — GHSA-ph3r-5jfg-f84f, PYSEC-2026-4197 — severity: MODERATE (database_specific.severity of OSV entry GHSA-ph3r-5jfg-f84f)
    • Summary, quoted from the source: “vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core”
    • Aliases listed by OSV: CVE-2026-105753, PYSEC-2026-4197, GHSA-ph3r-5jfg-f84f
    • Affected versions: all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source)
    • Fixed in: 0.28.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-ph3r-5jfg-f84f
  • vllm (PyPI), published 2026-10-05 — GHSA-85xf-c7hm-whqw, PYSEC-2026-4199 — severity: MODERATE (database_specific.severity of OSV entry GHSA-85xf-c7hm-whqw)
    • Summary, quoted from the source: “vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)”
    • Aliases listed by OSV: CVE-2026-105757, PYSEC-2026-4199, GHSA-85xf-c7hm-whqw
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-85xf-c7hm-whqw
  • vllm (PyPI), published 2026-10-05 — GHSA-58v5-2m8f-94pr, PYSEC-2026-4307 — severity: MODERATE (database_specific.severity of OSV entry GHSA-58v5-2m8f-94pr)
    • Summary, quoted from the source: “vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion”
    • Aliases listed by OSV: CVE-2026-105760, PYSEC-2026-4307, GHSA-58v5-2m8f-94pr
    • Affected versions: >= 0.23.0rc2 < 0.30.0 ; enumerated versions: 0.23.0, 0.24.0, 0.25.0, … (+6 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
    • Source entry: https://osv.dev/vulnerability/GHSA-58v5-2m8f-94pr
  • vllm (PyPI), published 2026-10-05 — GHSA-2phq-3phc-84px, PYSEC-2026-4198 — severity: MODERATE (database_specific.severity of OSV entry GHSA-2phq-3phc-84px)
    • Summary, quoted from the source: “vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on /score and /rerank”
    • Aliases listed by OSV: CVE-2026-105755, PYSEC-2026-4198, GHSA-2phq-3phc-84px
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
    • Source entry: https://osv.dev/vulnerability/GHSA-2phq-3phc-84px
  • vllm (PyPI), published 2026-10-05 — GHSA-2823-qmq8-rwvj, PYSEC-2026-4306 — severity: MODERATE (database_specific.severity of OSV entry GHSA-2823-qmq8-rwvj)
    • Summary, quoted from the source: “vLLM: Loose cache_salt validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream ValueError denial of service”
    • Aliases listed by OSV: CVE-2026-105756, PYSEC-2026-4306, GHSA-2823-qmq8-rwvj
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-2823-qmq8-rwvj
  • transformers (PyPI), published 2026-10-01 — PYSEC-2026-4174 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source: “Hugging Face Transformers downloads custom generation code before trust consent”
    • Aliases listed by OSV: CVE-2026-80047, GHSA-x9r9-c232-4q39
    • Affected versions: >= 4.49.0 <= 5.8.1 ; enumerated versions: 4.49.0, 4.50.0, 4.50.1, … (+52 more listed by the source)
    • Fixed in: not provided by the source
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4174
  • sentence-transformers (PyPI), published 2026-10-01 — PYSEC-2026-4164 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source: “sentence-transformers local model loading bypasses trust_remote_code and executes custom Python”
    • Aliases listed by OSV: CVE-2026-68770, GHSA-jhr6-gm9c-rqjv
    • Affected versions: all versions < 5.6.0 ; enumerated versions: 0.1.0, 0.2.0, 0.2.1, … (+75 more listed by the source)
    • Fixed in: 5.6.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4164
  • vllm (PyPI), published 2026-09-30 — PYSEC-2026-4186 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-103241, which OSV publishes for the same advisory): “vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service”
    • Aliases listed by OSV: CVE-2026-103241
    • Affected versions: all versions < 0.27.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+90 more listed by the source)
    • Fixed in: 0.27.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4186
  • vllm (PyPI), published 2026-09-26 — PYSEC-2026-4324 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-100653, which OSV publishes for the same advisory): “vLLM 0.22.1 before 0.28.0 Incomplete Artifact Pin Propagation”
    • Aliases listed by OSV: CVE-2026-100653, GHSA-hhv2-872h-628q
    • Affected versions: >= 0.22.1 < 0.28.0 ; enumerated versions: 0.22.1, 0.23.0, 0.24.0, … (+5 more listed by the source)
    • Fixed in: 0.28.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4324
  • vllm (PyPI), published 2026-09-26 — PYSEC-2026-4185 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-100652, which OSV publishes for the same advisory): “vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_ids”
    • Aliases listed by OSV: CVE-2026-100652, GHSA-qff2-492f-9fm4
    • Affected versions: >= 0.22.0 < 0.24.0 ; enumerated versions: 0.22.0, 0.22.1, 0.23.0
    • Fixed in: 0.24.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4185
  • vllm (PyPI), published 2026-09-26 — PYSEC-2026-4184 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-100650, which OSV publishes for the same advisory): “vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization”
    • Aliases listed by OSV: CVE-2026-100650, GHSA-p6g9-7v3x-m8mv
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4184
  • vllm (PyPI), published 2026-09-21 — PYSEC-2026-4008 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-94626, which OSV publishes for the same advisory): “vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size”
    • Aliases listed by OSV: CVE-2026-94626
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4008
  • vllm (PyPI), published 2026-09-21 — PYSEC-2026-4007 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-94625, which OSV publishes for the same advisory): “vLLM through 0.29.0 Resource Exhaustion via Ownerless Mooncake Transfer Placeholders”
    • Aliases listed by OSV: CVE-2026-94625
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4007
  • vllm (PyPI), published 2026-09-21 — PYSEC-2026-4005 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-94623, which OSV publishes for the same advisory): “vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure”
    • Aliases listed by OSV: CVE-2026-94623
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4005
  • vllm (PyPI), published 2026-09-21 — PYSEC-2026-4004 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-94622, which OSV publishes for the same advisory): “vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadata”
    • Aliases listed by OSV: CVE-2026-94622
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4004
  • vllm (PyPI), published 2026-09-21 — GHSA-frvg-qw88-hww9, PYSEC-2026-4006 — severity: MODERATE (database_specific.severity of OSV entry GHSA-frvg-qw88-hww9)
    • Summary, quoted from the source: “vllm p2p never connected zmq_exhaustion”
    • Aliases listed by OSV: CVE-2026-94624, PYSEC-2026-4006, GHSA-frvg-qw88-hww9
    • Affected versions: all versions < 0.32.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+96 more listed by the source)
    • Fixed in: 0.32.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-frvg-qw88-hww9
  • vllm (PyPI), published 2026-09-19 — PYSEC-2026-4000 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-93989, which OSV publishes for the same advisory): “vLLM through 0.29.0 Cross-Request Logits Corruption via bad_words”
    • Aliases listed by OSV: CVE-2026-93989
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4000
  • vllm (PyPI), published 2026-09-18 — PYSEC-2026-3999 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-93841, which OSV publishes for the same advisory): “vLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDs”
    • Aliases listed by OSV: CVE-2026-93841
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3999
  • vllm (PyPI), published 2026-09-18 — PYSEC-2026-3998 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-93840, which OSV publishes for the same advisory): “vLLM before 0.29.0 Cross-Request Logits Corruption via allowed_token_ids”
    • Aliases listed by OSV: CVE-2026-93840
    • Affected versions: all versions < 0.29.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+93 more listed by the source)
    • Fixed in: 0.29.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3998
  • vllm (PyPI), published 2026-09-18 — PYSEC-2026-3997 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-93592, which OSV publishes for the same advisory): “vLLM before 0.28.0 Denial of Service via negative token ID”
    • Aliases listed by OSV: CVE-2026-93592, GHSA-25q3-v2hm-8vpf
    • Affected versions: all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source)
    • Fixed in: 0.28.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3997
  • vllm (PyPI), published 2026-09-17 — PYSEC-2026-3996 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-93436, which OSV publishes for the same advisory): “vLLM through 0.29.0 Memory Exhaustion via Rejected Requests”
    • Aliases listed by OSV: CVE-2026-93436
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3996
  • vllm (PyPI), published 2026-09-17 — GHSA-8pw2-6jv3-mj5j, PYSEC-2026-4178 — severity: MODERATE (database_specific.severity of OSV entry GHSA-8pw2-6jv3-mj5j)
    • Summary, quoted from the source: “vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation”
    • Aliases listed by OSV: CVE-2026-69147, PYSEC-2026-4178, GHSA-8pw2-6jv3-mj5j
    • Affected versions: all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source)
    • Fixed in: 0.28.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-8pw2-6jv3-mj5j
  • vllm (PyPI), published 2026-09-16 — GHSA-hcwq-8wjf-3gcr, PYSEC-2026-4179 — severity: MODERATE (database_specific.severity of OSV entry GHSA-hcwq-8wjf-3gcr)
    • Summary, quoted from the source: “vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions”
    • Aliases listed by OSV: CVE-2026-57173, PYSEC-2026-4179, GHSA-hcwq-8wjf-3gcr
    • Affected versions: all versions < 0.24.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+86 more listed by the source)
    • Fixed in: 0.24.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-hcwq-8wjf-3gcr
  • vllm (PyPI), published 2026-09-12 — PYSEC-2026-3985 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-90553, which OSV publishes for the same advisory): “vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor”
    • Aliases listed by OSV: CVE-2026-90553, GHSA-3c86-2m5g-59q7
    • Affected versions: all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source)
    • Fixed in: 0.28.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3985
  • vllm (PyPI), published 2026-09-10 — PYSEC-2026-3938 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source: “vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts”
    • Aliases listed by OSV: CVE-2026-73557, GHSA-pr7f-p5mw-fc87
    • Affected versions: >= 0.21.0 < 0.26.0 ; enumerated versions: 0.21.0, 0.22.0, 0.22.1, … (+4 more listed by the source)
    • Fixed in: 0.26.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3938
  • vllm (PyPI), published 2026-09-10 — PYSEC-2026-3937 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source: “vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages”
    • Aliases listed by OSV: CVE-2026-73555, GHSA-hwrm-c4cx-rf4j
    • Affected versions: all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source)
    • Fixed in: 0.26.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3937
  • vllm (PyPI), published 2026-09-10 — PYSEC-2026-3936 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source: “vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds”
    • Aliases listed by OSV: CVE-2026-71486, GHSA-8737-qx52-hjff
    • Affected versions: all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source)
    • Fixed in: 0.26.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3936
  • vllm (PyPI), published 2026-09-10 — PYSEC-2026-3933 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source: “vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m”
    • Aliases listed by OSV: CVE-2026-73556, GHSA-48jh-3gj7-fg8v
    • Affected versions: all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source)
    • Fixed in: 0.26.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3933
  • transformers (PyPI), published 2026-09-10 — PYSEC-2026-3929 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source: “Transformers save_pretrained path traversal allows arbitrary file writes through chat template names”
    • Aliases listed by OSV: CVE-2026-9856, GHSA-xrqw-3rrv-vx5w
    • Affected versions: all versions < 5.10.0 ; enumerated versions: 0.1, 2.0.0, 2.1.0, … (+223 more listed by the source)
    • Fixed in: 5.10.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3929
  • accelerate (PyPI), published 2026-09-10 — PYSEC-2026-3804 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source: “Accelerate path traversal and denial of service via sharded checkpoint weight_map entries”
    • Aliases listed by OSV: CVE-2026-69112, GHSA-4j2p-28q2-5m79
    • Affected versions: all versions <= 1.14.0 ; enumerated versions: 0.0.1, 0.1.0, 0.10.0, … (+79 more listed by the source)
    • Fixed in: not provided by the source
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3804
  • vllm (PyPI), published 2026-09-08 — GHSA-7m6h-x95x-82q5, PYSEC-2026-3935 — severity: MODERATE (database_specific.severity of OSV entry GHSA-7m6h-x95x-82q5)
    • Summary, quoted from the source: “vLLM: Cross-User Data Leak Vulnerability”
    • Aliases listed by OSV: CVE-2026-73558, PYSEC-2026-3935, GHSA-7m6h-x95x-82q5
    • Affected versions: all versions < 0.27.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+90 more listed by the source)
    • Fixed in: 0.27.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
    • Source entry: https://osv.dev/vulnerability/GHSA-7m6h-x95x-82q5
  • vllm (PyPI), published 2026-09-08 — GHSA-4hhp-h66f-j5j7, PYSEC-2026-3934 — severity: MODERATE (database_specific.severity of OSV entry GHSA-4hhp-h66f-j5j7)
    • Summary, quoted from the source: “vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor _fetch_image and audio loader bypass MediaConnector protections”
    • Aliases listed by OSV: CVE-2026-73560, PYSEC-2026-3934, GHSA-4hhp-h66f-j5j7
    • Affected versions: all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source)
    • Fixed in: 0.26.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    • Source entry: https://osv.dev/vulnerability/GHSA-4hhp-h66f-j5j7

How this page is built

  • Data read live from the OSV (api.osv.dev/v1/query) on 2026-11-05 (server clock); the exact read window is kept in the dated state file. Nothing on this page predates that read, and nothing on it was written earlier.
  • Window: advisories whose published field falls on or after 2026-09-06 (the last 60 days). Entries outside that window are skipped, however severe they look.
  • Exact package names and ecosystems queried (25 queries, one POST request each): torch (PyPI), transformers (PyPI), vllm (PyPI), langchain (PyPI), langchain-core (PyPI), openai (PyPI), llama-index (PyPI), sentence-transformers (PyPI), accelerate (PyPI), diffusers (PyPI), gradio (PyPI), fastapi (PyPI), pydantic (PyPI), numpy (PyPI), pillow (PyPI), aiohttp (PyPI), requests (PyPI), safetensors (PyPI), onnxruntime (PyPI), xgboost (PyPI), scikit-learn (PyPI), tensorflow (PyPI), openai (npm), langchain (npm), @langchain/core (npm).
  • 25 of 25 queries returned a valid answer. None failed.
  • Identifiers, summaries, affected ranges and fixed versions are copied verbatim from the API response. Where OSV lists the same vulnerability under more than one identifier (a GitHub advisory and a PyPA entry sharing one CVE), the entries are grouped and every identifier of the group is shown.
  • Severity appears only when the source provides it: either database_specific.severity (the entry's own word, for example MODERATE) or a CVSS vector from the severity field, quoted character for character and attributed to the entry that carries it. No score is computed, converted or averaged on this page.
  • No assessment of our own: no exploitability claim, no priority ranking, no affected-product reasoning. This is a reading of a database, not an audit.
  • No human reviewed this page before publication. It is written by pipelines/stack_advisories.py and published unread. If the API is unavailable, the run fails and the page is left as it was — an empty page is never substituted for a failed collection.
  • Source of record: https://api.osv.dev/v1/query (POST, JSON body) · entry detail: https://osv.dev/vulnerability/
stack-advisoriessecuritysupply-chainosvftl-lab
Share this article:

Was this article helpful?

Let us know to improve our AI generation.