Tagged “pip”

CVEs tagged pip, newest first.

5513 CVEsRSS

CVE-2026-115914Medium· 6.5

vLLM DeepSeek-OCR image processing vulnerable to denial of service

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote client that can reach the OpenAI-compatible API to submit a legal…

▾ Sunlitvllm-project · vllmEPSS 0.40%via CVEORG

CVE-2026-115918Medium· 6.5

1w ago

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an attacker-controlled template in chat_template_kwargs[chat_template] when n…

▾ Sunlitvllm-project · vllmEPSS 0.35%via CVEORG

CVE-2026-115921Medium· 6.2

1w ago

ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. From 1.4.0 until 1.22.0, ScanInferenceFunction, ScanInferenceFunction_opset8, and ScanInferenceFunction_opset9 do not safely validate the requ…

▾ Sunlitonnx · onnxEPSS 0.13%via CVEORG

CVE-2026-115922Medium· 6.2

1w ago

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0, _unpack_2bit() and _unpack_4bit() resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying …

▾ Sunlitonnx · onnxEPSS 0.13%via CVEORG

MAL-2026-18328Critical⚠ Exploited

1w ago

vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate EngineCore by bypassi…

vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate EngineCore by bypassing logprob_token_ids limits in the Rust gRPC frontend. Attackers can send Generate or GenerateStream…

▾ Twilightvllm · vllmEPSS 0.34%via OSV

CVE-2026-116178High· 7.5

1w ago

vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending inc…

vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending inconsistent multimodal metadata to the disaggregated /inference/v1/generate endpoint. Attackers can re…

▾ Twilightvllm · vllmEPSS 0.33%via OSV

CVE-2026-116177High· 7.5

1w ago

vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass

vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to exhaust memory because the Nemotron-VL processors globally set Image.MAX_IMAGE_PIXELS to None. Attackers …

▾ Twilightvllm-project · vllmEPSS 0.29%via CVEORG

CVE-2026-116176High· 8.2

1w ago

vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector

vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outbound connections by embedding a decode address in the X-Request-Id header. Attackers can make a P2pNcclConnector pref…

▾ Twilightvllm-project · vllmEPSS 0.32%via CVEORG

MAL-2026-18242Critical⚠ Exploited

2w ago