GHSA-grg2-63fw-f2qr

The record

vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions

Affected packages

Related vulnerabilities

• CVE-2026-22773 vLLM is an inference and serving engine for large language models (LLMs). Same vulnerability
• CVE-2026-22778 vLLM is an inference and serving engine for large language models (LLMs). Also affects vllm
• GHSA-4r2x-xpjr-7cvv vLLM has RCE In Video Processing Also affects vllm
• GHSA-qh4c-xf7m-gxfc vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector Also affects vllm
• CVE-2026-24779 vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector Also affects vllm
• GHSA-2pc9-4j83-qjmr vLLM affected by RCE via auto_map dynamic module loading during model initialization Also affects vllm
• CVE-2026-22807 vLLM affected by RCE via auto_map dynamic module loading during model initialization Also affects vllm
• GHSA-mcmc-2m55-j8jj vLLM introduced enhanced protection for CVE-2025-62164 Also affects vllm