Vulnerabilities of vLLM vLLM
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-56340 | vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing | 8.7 High | Jun 20, 2026 |
| CVE-2025-71379 | vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities | 5.3 Medium | Jun 20, 2026 |