https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 23:44:35 +0000 https://cve.radiocsirt.org/vuln/cve-2024-9052 CVE-2024-9052 https://cve.radiocsirt.org/vuln/cve-2024-9052 https://cve.radiocsirt.org/vuln/pysec-2026-568 <p><strong>Affected:</strong> PyPI: vllm</p> <p>vllm-project vllm version 0.6.0 contains a vulnerability in the distributed training API. The function vllm.distributed.GroupCoordinator.recv_object() deserializes received object bytes using pickle.loads() without sanitization, leading to a remote code execution vulnerability.</p> <p>### Maintainer perspective Note that vLLM does NOT use the code as described in the report on huntr. The problem only exists if you use these internal APIs in a way that exposes them to a network as described. The vllm team was not involved in the analysis of this report and the decision to assign it a CVE.</p> <p><strong>Affected:</strong> PyPI: vllm</p> <p>vllm-project vllm version 0.6.0 contains a vulnerability in the distributed training API. The function vllm.distributed.GroupCoordinator.recv_object() deserializes received object bytes using pickle.loads() without sanitization, leading to a remote code execution vulnerability.</p> <p>### Maintainer perspective Note that vLLM does NOT use the code as described in the report on huntr. The problem only exists if you use these internal APIs in a way that exposes them to a network as described. The vllm team was not involved in the analysis of this report and the decision to assign it a CVE.</p> https://cve.radiocsirt.org/vuln/pysec-2026-568