https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 11:30:05 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-94623 <p>vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector&#39;s prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in NixlBaseConnectorWorker._apply_prefix_caching by submitting completion requests with multiple prompts of varying lengths, causing the decode worker to terminate and become unavailable until restarted.</p> <p>vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector&#39;s prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in NixlBaseConnectorWorker._apply_prefix_caching by submitting completion requests with multiple prompts of varying lengths, causing the decode worker to terminate and become unavailable until restarted.</p> https://db.gcve.eu/vuln/fkie_cve-2026-94623 https://db.gcve.eu/vuln/ghsa-g3cp-v4cp-9xfq <p>vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector&#39;s prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in NixlBaseConnectorWorker._apply_prefix_caching by submitting completion requests with multiple prompts of varying lengths, causing the decode worker to terminate and become unavailable until restarted.</p> <p>vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector&#39;s prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in NixlBaseConnectorWorker._apply_prefix_caching by submitting completion requests with multiple prompts of varying lengths, causing the decode worker to terminate and become unavailable until restarted.</p> https://db.gcve.eu/vuln/ghsa-g3cp-v4cp-9xfq https://db.gcve.eu/vuln/pysec-2026-4005 <p><strong>Affected:</strong> PyPI: vllm</p> <p>vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector&#39;s prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in NixlBaseConnectorWorker._apply_prefix_caching by submitting completion requests with multiple prompts of varying lengths, causing the decode worker to terminate and become unavailable until restarted.</p> <p><strong>Affected:</strong> PyPI: vllm</p> <p>vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector&#39;s prefix caching implementation that fails to properly validate block counts across multi-prompt completion requests in prefill/decode disaggregated deployments. Attackers can trigger an assertion failure in NixlBaseConnectorWorker._apply_prefix_caching by submitting completion requests with multiple prompts of varying lengths, causing the decode worker to terminate and become unavailable until restarted.</p> https://db.gcve.eu/vuln/pysec-2026-4005