vllm-cu130 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the vllm-cu130 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Resource Exhaustion	<0.30.0-r0
H Insufficient Verification of Data Authenticity	<0.31.0-r0
H Uncaught Exception	<0.31.0-r0
H Improper Resource Shutdown or Release	<0.27.0-r0
L Allocation of Resources Without Limits or Throttling	<0.30.0-r0
L Authorization Bypass Through User-Controlled Key	<0.30.0-r0
L Reachable Assertion	<0.28.0-r0
L Improper Input Validation	<0.30.0-r0
L Information Exposure	<0.30.0-r0
L Memory Leak	<0.30.0-r0
L Resource Exhaustion	<0.30.0-r0
L Arbitrary Code Injection	<0.24.0-r0
L Improper Input Validation	<0.30.0-r0
L Improper Input Validation	<0.30.0-r0
M Resource Exhaustion	<0.29.0-r0
M Resource Exhaustion	<0.29.0-r0
H Improper Certificate Validation	<0.30.0-r0
H Improper Input Validation	<0.24.0-r0
M Inefficient Regular Expression Complexity	<0.30.0-r0
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0.30.0-r0
H Allocation of Resources Without Limits or Throttling	<0.30.0-r0
M Use of Less Trusted Source	<0.28.0-r0
M Allocation of Resources Without Limits or Throttling	<0.29.0-r0
L Modification of Assumed-Immutable Data (MAID)	<0.30.0-r0
L CVE-2026-80047	<0.21.0-r1
H Improper Input Validation	<0.29.0-r0
M Resource Exhaustion	<0.29.0-r0
M Improper Validation of Array Index	<0.29.0-r0
L Improper Verification of Cryptographic Signature	<0.30.0-r0
M Incorrect Behavior Order: Validate Before Canonicalize	<0.30.0-r0
H Allocation of Resources Without Limits or Throttling	<0.30.0-r0
C Improper Verification of Cryptographic Signature	<0.30.0-r0
L Improper Verification of Cryptographic Signature	<0.30.0-r0
H Improper Handling of Exceptional Conditions	<0.30.0-r0
C Information Exposure	<0.30.0-r0
L Uncontrolled Recursion	<0.30.0-r0
L Improper Verification of Cryptographic Signature	<0.30.0-r0
L Improper Verification of Cryptographic Signature	<0.30.0-r0
H Reachable Assertion	<0.30.0-r0
H Uncontrolled Memory Allocation	<0.30.0-r0
M Improper Validation of Array Index	<0.30.0-r0
H Allocation of Resources Without Limits or Throttling	<0.30.0-r0
M Missing Release of Resource after Effective Lifetime	<0.30.0-r0
H Uncaught Exception	<0.30.0-r0
H Memory Leak	<0.30.0-r0
H Resource Exhaustion	<0.28.0-r0
M Resource Exhaustion	<0.27.0-r0
H Improper Validation of Array Index	<0.28.0-r0
M Improper Validation of Array Index	<0.30.0-r0
H Memory Leak	<0.30.0-r0
M Improper Validation of Array Index	<0.29.0-r0
H Directory Traversal	<0.30.0-r0
L Incorrect Privilege Assignment	<0.25.1-r0
L Allocation of Resources Without Limits or Throttling	<0.25.1-r0
L Improper Certificate Validation	<0.25.1-r0
L Resource Exhaustion	<0.28.0-r0
L Allocation of Resources Without Limits or Throttling	<0.24.0-r0
M Improper Handling of Highly Compressed Data (Data Amplification)	<0.28.0-r0
H Arbitrary Code Injection	<0.28.0-r0
L HTTP Request Smuggling	<0.28.0-r0
L Improper Handling of Highly Compressed Data (Data Amplification)	<0.28.0-r0
L CRLF Injection	<0.28.0-r0
L Algorithmic Complexity	<0.27.0-r0
L Cleartext Transmission of Sensitive Information	<0.27.0-r0
L Integer Overflow or Wraparound	<0.27.0-r0
L Resource Exhaustion	<0.26.0-r0
M Race Condition	<0.26.0-r0
L Information Exposure	<0.26.0-r0
L Directory Traversal	<0.22.1-r0
L GHSA-hrxh-6v49-42gf	<0.28.0-r0
L Resource Exhaustion	<0.26.0-r0
L Server-Side Request Forgery (SSRF)	<0.26.0-r0
L Resource Exhaustion	<0.26.0-r0
M Out-of-Bounds	<0.27.0-r0
L Information Exposure	<0.26.0-r1
L HTTP Request Smuggling	<0.25.1-r1
L Resource Exhaustion	<0.23.0-r0
L Improper Certificate Validation	<0.23.0-r0
L Improper Input Validation	<0.25.1-r1
L Out-of-bounds Read	<0.25.1-r1
L Resource Exhaustion	<0.25.0-r0
L Resource Exhaustion	<0.25.0-r0
L Resource Exhaustion	<0.25.0-r0
L OS Command Injection	<0.25.0-r0
H Allocation of Resources Without Limits or Throttling	<0.25.0-r0
L Uncontrolled Memory Allocation	<0.25.0-r0
L Uncontrolled Memory Allocation	<0.25.0-r0
L Resource Exhaustion	<0.25.0-r0
C Out-of-bounds Read	<0.25.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0.25.0-r0
L Integer Overflow or Wraparound	<0.25.0-r0
L Out-of-bounds Read	<0.25.0-r0
L Uncontrolled Memory Allocation	<0.25.0-r0
L Uncontrolled Memory Allocation	<0.25.0-r0
L Integer Overflow or Wraparound	<0.25.0-r0
L Out-of-bounds Write	<0.25.0-r0
L Missing Authorization	<0.22.0-r0
L Authorization Bypass Through User-Controlled Key	<0.22.0-r0
L Origin Validation Error	<0.24.0-r0
L Use of a Broken or Risky Cryptographic Algorithm	<0.23.0-r0
L CVE-2026-55574	<0.24.0-r0
L CVE-2026-55514	<0.24.0-r0
L Improper Input Validation	<0.24.0-r0
L Resource Exhaustion	<0.24.0-r0
H Allocation of Resources Without Limits or Throttling	<0.25.1-r1
L GHSA-4xgf-cpjx-pc3j	<0.24.0-r0
L Information Exposure Through Log Files	<0.24.0-r0
M Misinterpretation of Input	<0.24.0-r0
L Improper Validation of Specified Type of Input	<0.24.0-r0
L Improper Handling of Highly Compressed Data (Data Amplification)	<0.24.0-r0
L Information Exposure	<0.24.0-r0
L Uncontrolled Search Path Element	<0.22.1-r0
L HTTP Request Smuggling	<0.22.0-r0
L Arbitrary Code Injection	<0.22.0-r0
L Use of Incorrectly-Resolved Name or Reference	<0.23.0-r0
L Improper Input Validation	<0.22.0-r0
L Improper Validation of Specified Quantity in Input	<0.22.1-r0
L Resource Exhaustion	<0.21.0-r2
L CVE-2026-27145	*
L Interpretation Conflict	<0.22.0-r0
L CVE-2026-48818	<0.22.0-r0
L Allocation of Resources Without Limits or Throttling	<0.23.0-r0
M Open Redirect	<0.23.0-r0
L Improper Authentication	<0.21.0-r2
H Improper Resource Shutdown or Release	<0.23.0-r0
L Allocation of Resources Without Limits or Throttling	<0.23.0-r0
L GHSA-537c-gmf6-5ccf	<0.23.0-r0
L Improper Restriction of Rendered UI Layers or Frames	<0.25.1-r1
L Resource Exhaustion	<0.22.0-r0
L Allocation of Resources Without Limits or Throttling	<0.23.0-r0
L Allocation of Resources Without Limits or Throttling	<0.23.0-r0
L Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')	<0.22.0-r0
L Improper Restriction of Rendered UI Layers or Frames	<0.25.1-r1
L Improper Verification of Cryptographic Signature	<0.21.0-r2
L Improper Handling of Highly Compressed Data (Data Amplification)	<0.23.0-r0
L CRLF Injection	<0.22.0-r0
L Improper Initialization	<0.23.0-r0
L Resource Exhaustion	<0.25.1-r1
L Unintended Proxy or Intermediary ('Confused Deputy')	<0.21.0-r2
L Improper Restriction of Rendered UI Layers or Frames	<0.25.1-r1
L Cross-site Scripting (XSS)	<0.25.1-r1
L Improper Cleanup on Thrown Exception	<0.21.0-r2
L Improper Validation of Certificate with Host Mismatch	<0.23.0-r0
L Insufficient Verification of Data Authenticity	<0.22.0-r0
L CVE-2026-39821	<0.25.1-r1
L CVE-2026-39825	<0.25.1-r1
L CVE-2026-42499	<0.25.1-r1
H Double Free	<0.25.1-r1
H Origin Validation Error	<0.22.0-r0
M HTTP Request Smuggling	<0.22.0-r0
H Deserialization of Untrusted Data	<0.22.0-r0
M Inefficient Regular Expression Complexity	<0.20.1-r1
H Improper Handling of Highly Compressed Data (Data Amplification)	<0.20.1-r1
M Information Exposure	<0.20.1-r1
L CVE-2025-69872	<0.26.0-r0

Vulnerability

Vulnerable Version

Resource Exhaustion

<0.30.0-r0