https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 12:07:13 +0000 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11040 <p>Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-8939. Notes: All CVE users should reference CVE-2024-8939 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.</p> <p>Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-8939. Notes: All CVE users should reference CVE-2024-8939 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-11040 https://cve.radiocsirt.org/vuln/ghsa-hhr6-7642-8pmh <p>vllm-project vllm version 0.5.2.2 is vulnerable to Denial of Service attacks. The issue occurs in the &#39;POST /v1/completions&#39; and &#39;POST /v1/embeddings&#39; endpoints. For &#39;POST /v1/completions&#39;, enabling &#39;use_beam_search&#39; and setting &#39;best_of&#39; to a high value causes the HTTP connection to time out, with vllm ceasing effective work and the request remaining in a &#39;pending&#39; state, blocking new completion requests. For &#39;POST /v1/embeddings&#39;, supplying invalid inputs to the JSON object causes an issue in the background loop, resulting in all further completion requests returning a 500 HTTP error code (&#39;Internal Server Error&#39;) until vllm is restarted.</p> <p>vllm-project vllm version 0.5.2.2 is vulnerable to Denial of Service attacks. The issue occurs in the &#39;POST /v1/completions&#39; and &#39;POST /v1/embeddings&#39; endpoints. For &#39;POST /v1/completions&#39;, enabling &#39;use_beam_search&#39; and setting &#39;best_of&#39; to a high value causes the HTTP connection to time out, with vllm ceasing effective work and the request remaining in a &#39;pending&#39; state, blocking new completion requests. For &#39;POST /v1/embeddings&#39;, supplying invalid inputs to the JSON object causes an issue in the background loop, resulting in all further completion requests returning a 500 HTTP error code (&#39;Internal Server Error&#39;) until vllm is restarted.</p> https://cve.radiocsirt.org/vuln/ghsa-hhr6-7642-8pmh