Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:53:04 +0000 CVE-2025-48943 — vLLM allows clients to crash the openai server with invalid regex https://cve.radiocsirt.org/vuln/cve-2025-48943 <p><strong>Affected:</strong> vllm-project vllm</p> <p>vLLM is an inference and serving engine for large language models (LLMs). Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service (ReDoS) that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to GHSA-6qc9-v4r8-22xg/CVE-2025-48942, but for regex instead of a JSON schema. Version 0.9.0 fixes the issue.</p> <p><strong>Affected:</strong> vllm-project vllm</p> <p>vLLM is an inference and serving engine for large language models (LLMs). Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service (ReDoS) that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to GHSA-6qc9-v4r8-22xg/CVE-2025-48942, but for regex instead of a JSON schema. Version 0.9.0 fixes the issue.</p> https://cve.radiocsirt.org/vuln/cve-2025-48943 GHSA-9hcf-v7m4-6m2j — vLLM allows clients to crash the openai server with invalid regex https://cve.radiocsirt.org/vuln/ghsa-9hcf-v7m4-6m2j <p><strong>Affected:</strong> PyPI: vllm</p> <p>### Impact</p> <p>A denial of service bug caused the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to [GHSA-6qc9-v4r8-22xg](https://github.com/vllm-project/vllm/security/advisories/GHSA-6qc9-v4r8-22xg), but for regex instead of a JSON schema.</p> <p>Issue with more details: https://github.com/vllm-project/vllm/issues/17313</p> <p>### Patches</p> <p>* https://github.com/vllm-project/vllm/pull/17623</p> <p><strong>Affected:</strong> PyPI: vllm</p> <p>### Impact</p> <p>A denial of service bug caused the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to [GHSA-6qc9-v4r8-22xg](https://github.com/vllm-project/vllm/security/advisories/GHSA-6qc9-v4r8-22xg), but for regex instead of a JSON schema.</p> <p>Issue with more details: https://github.com/vllm-project/vllm/issues/17313</p> <p>### Patches</p> <p>* https://github.com/vllm-project/vllm/pull/17623</p> https://cve.radiocsirt.org/vuln/ghsa-9hcf-v7m4-6m2j