Jiapeng Li

vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure

vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions

vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadata

vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision

SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room

InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch

SGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpoint

InternLM LMDeploy through 0.17.0 Assertion Denial of Service

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle Deserialization

vLLM before 0.27.0 Denial of Service via DeepStream Backend