Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2011
  • PyPI/vllm
 vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class 07 Jul
  • Fix available
  • Severity - 7.1 (High)
CGA-hwj9-fhq2-96x7
  • Chainguard/tritonserver-backend-vllm-cuda-12.9
 See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.1 (High)
CGA-mm8p-xccj-m4cr
  • Chainguard/tritonserver-backend-vllm-meta-cuda-12.9
 See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.1 (High)
CGA-63jp-v5v7-wf38
  • Chainguard/py3.12-vllm-cuda-12.4
 See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.1 (High)
CGA-73rw-54vv-ffx9
  • Chainguard/py3.10-vllm-cuda-12.4
 See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.1 (High)
CGA-p9w4-27qx-v4q8
  • Chainguard/py3-vllm-cuda-12.4
 See record for full details 30 Oct 2025
  • Fix available
  • Severity - 7.1 (High)
GHSA-3f6c-7fw2-ppm4
  • PyPI/vllm
 vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class 07 Oct 2025
  • Fix available
  • Severity - 7.1 (High)