https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 03:07:27 +0000 https://cve.radiocsirt.org/vuln/cve-2024-9053 <p><strong>Affected:</strong> vllm-project/vllm</p> <p>vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages without any sanitization. This can result in remote code execution by deserializing malicious pickle data.</p> <p><strong>Affected:</strong> vllm-project/vllm</p> <p>vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages without any sanitization. This can result in remote code execution by deserializing malicious pickle data.</p> https://cve.radiocsirt.org/vuln/cve-2024-9053 https://cve.radiocsirt.org/vuln/pysec-2025-222 <p><strong>Affected:</strong> PyPI: vllm</p> <p>vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages without any sanitization. This can result in remote code execution by deserializing malicious pickle data.</p> <p><strong>Affected:</strong> PyPI: vllm</p> <p>vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages without any sanitization. This can result in remote code execution by deserializing malicious pickle data.</p> https://cve.radiocsirt.org/vuln/pysec-2025-222