Skip to content
OpenAdvisories

Vendor

vLLM

3 known vulnerabilities.

Products

vLLM 2 AIBrix 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-71379

    vllm - Regular Expression Denial of Service in Multiple Components

    vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities. Several regex patterns — in vllm/lora/utils.py, the phi4mini tool parser, and the OpenAI-compatible serving chat endpoint — are susceptible to ca…

    vLLM vLLM vllm PyPI