Skip to content
Threat Feed
Subscribe

Product

VLLM (0.18.0 <= X < 0.31.0)

1 brief RSS
medium advisory

vLLM: Uncontrolled resource consumption via image processing (CVE-2026-116177)

An unauthenticated denial of service vulnerability in vLLM versions 0.10.2 through 0.24.x allows attackers to trigger an out-of-memory condition by submitting decompression-bomb images to the /v1/chat/completions endpoint.

vLLM +4 denial-of-service vulnerability webserver info-disclosure
1t 4c updated