Skip to content
OpenAdvisories

Vendor

vLLM

128 known vulnerabilities.

Products

vLLM 123 vllm-project/vllm 4 AIBrix 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-34753 Public exploit

    vLLM affected by Server-Side Request Forgery (SSRF) in `download_bytes_from_url `

    vLLM is an inference and serving engine for large language models (LLMs). From 0.16.0 to before 0.19.0, a server-side request forgery (SSRF) vulnerability in download_bytes_from_url allows any actor who can control batch input JSON to make the vLLM batch runn…

    vLLM vLLM vllm PyPI