Jiajia Liu

vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions

vLLM through 0.29.0 Resource Exhaustion via Ownerless Mooncake Transfer Placeholders

vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size

vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision

vLLM through 0.29.0 Memory Exhaustion via Rejected Requests

vLLM before 0.29.0 Cross-Request Logits Corruption via allowed_token_ids

vLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDs

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel

LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint

SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx