CVE security advisories and vulnerability history for vllm-project/vllm by vLLM.
Last updated
vLLM vllm-project/vllm has 4 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 9.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting vLLM vllm-project/vllm, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of vLLM vllm-project/vllm's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of vLLM vllm-project/vllm's CVEs are currently listed in CISA's KEV catalog.
Public exploits
4
4 of vLLM vllm-project/vllm's CVEs have a known public exploit available.
Browse every vLLM vllm-project/vllm version named in a CVE, then pick one to see only the CVEs that affect it.
4 CVEs
The CWE weakness categories most often found in vLLM vllm-project/vllm CVEs. Follow any weakness for its full explanation.
How many vLLM vllm-project/vllm CVEs were published each year.
Browse vulnerabilities for other products by vLLM.
Common questions about vLLM vllm-project/vllm vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new vLLM vllm-project/vllm vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
