Vendor
An input validation flaw in vLLM version 0.29.0 and earlier allows remote attackers to cause a denial-of-service by submitting malicious parameters to OpenAI-compatible completion endpoints, triggering memory exhaustion.