PyPI - OSV

PYSEC-2026-4178

PyPI/vllm

vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation yesterday

Fix available
Severity - 6.5 (Medium)

PYSEC-2026-4179

PyPI/vllm

vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions yesterday

Fix available
Severity - 6.5 (Medium)

PYSEC-2026-4008

PyPI/vllm

See record for full details 21 Sep

Fix available
Severity - 8.7 (High)

PYSEC-2026-4007

PyPI/vllm

See record for full details 21 Sep

Fix available
Severity - 6.9 (Medium)

PYSEC-2026-4006

PyPI/vllm

See record for full details 21 Sep

Fix available
Severity - 8.7 (High)

PYSEC-2026-4005

PyPI/vllm

See record for full details 21 Sep

Fix available
Severity - 8.7 (High)

PYSEC-2026-4004

PyPI/vllm

See record for full details 21 Sep

Fix available
Severity - 8.7 (High)

PYSEC-2026-4000

PyPI/vllm

See record for full details 19 Sep

Fix available
Severity - 4.3 (Medium)

PYSEC-2026-3999

PyPI/vllm

See record for full details 18 Sep

Fix available
Severity - 5.3 (Medium)

PYSEC-2026-3998

PyPI/vllm

See record for full details 18 Sep

Fix available
Severity - 5.3 (Medium)

PYSEC-2026-3997

PyPI/vllm

See record for full details 18 Sep

Fix available
Severity - 8.7 (High)

PYSEC-2026-3996

PyPI/vllm

See record for full details 17 Sep

Fix available
Severity - 8.7 (High)

GHSA-8pw2-6jv3-mj5j

PyPI/vllm

vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation 17 Sep

Fix available
Severity - 6.5 (Medium)

GHSA-hcwq-8wjf-3gcr

PyPI/vllm

vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions 16 Sep

Fix available
Severity - 6.5 (Medium)

PYSEC-2026-3985

PyPI/vllm

See record for full details 12 Sep

Fix available
Severity - 8.5 (High)

PYSEC-2026-3934

PyPI/vllm

vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections 10 Sep

Fix available
Severity - 6.5 (Medium)