v
vllm-project
Security Risk Profile
23
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 20, 2025 to present
7
Total CVEs
4
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
7.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
23/100
low
📈 3 in Last 30 Days
Severity Distribution
Critical
3High
1Medium
2Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
OS Command Injection
1
Most Affected Products
1. vllm-project vllm8
2. pip/vllm3
3. vllm vllm1
Recent Vulnerabilities
See more →CVE-2026-92365
CVSS 5.3medium
vllm-project vllm thinking_budget_state.py algorithmic complexity
Sep 16, 2026🔧 No Patch
CVE-2026-92220
CVSS 6.9EPSS 1%medium
vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumption
Sep 16, 2026🔧 No Patch
CVE-2026-90878
CVSS 2.1EPSS 0%low
vllm-project vLLM Jinja Template Rendering completions resource consumption
Sep 15, 2026🔧 No Patch
CVE-2024-11040
CVSS 7.5high
Denial of Service in vllm-project/vllm
Mar 20, 2025🔧 No Patch
CVE-2024-11041
CVSS 9.8critical
Remote Code Execution in vllm-project/vllm
Mar 20, 2025🔧 No Patch
CVE-2024-9053
CVSS 9.8critical
Remote Code Execution in vllm-project/vllm
Mar 20, 2025🔧 No Patch
CVE-2024-9052
CVSS 9.8critical
Remote Code Execution by Pickle Deserialization in vllm-project/vllm
Mar 20, 2025🔧 No Patch
Monitor vllm-project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.