https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-27T11:57:50.673268+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116179 fkie_cve-2026-116179 2026-10-27T11:57:50.684656+00:00

vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs. Attackers can set num_frames to -1 with a large inline video so VideoMediaIO.load_base64 decodes every frame, exhausting memory and crashing the API frontend.

 https://db.gcve.eu/vuln/ghsa-6vc9-vh4h-cxh4 GHSA-6vc9-vh4h-cxh4 2026-10-27T11:57:50.684721+00:00

vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs. Attackers can set num_frames to -1 with a large inline video so VideoMediaIO.load_base64 decodes every frame, exhausting memory and crashing the API frontend.