Cpe:2.3:a:vllm:mooncake_connector:*:*:*:*:*:*:*:*

The vLLM Mooncake connector up to version 0.29.0 is susceptible to a denial-of-service attack where malicious completion requests exhaust GPU memory by orphaned KV cache blocks.