[Git][security-tracker-team/security-tracker][master] Add new issues in vllm, itp'ed

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4725d893 by Salvatore Bonaccorso at 2026-10-25T20:28:56+01:00
Add new issues in vllm, itp'ed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -55,25 +55,25 @@ CVE-2026-116183 (phpMyFAQ before 4.1.10 contains an object-level authorization b
 CVE-2026-116182 (phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerab ...)
 	NOT-FOR-US: phpMyFAQ
 CVE-2026-116181 (vLLM from 0.20.1 before 0.29.0 contains an improper input validation v ...)
-	TODO: check
+	- vllm <itp> (bug #1095237)
 CVE-2026-116180 (vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTe ...)
-	TODO: check
+	- vllm <itp> (bug #1095237)
 CVE-2026-116179 (vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerab ...)
-	TODO: check
+	- vllm <itp> (bug #1095237)
 CVE-2026-116178 (vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerabil ...)
-	TODO: check
+	- vllm <itp> (bug #1095237)
 CVE-2026-116177 (vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consu ...)
-	TODO: check
+	- vllm <itp> (bug #1095237)
 CVE-2026-116176 (vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery v ...)
-	TODO: check
+	- vllm <itp> (bug #1095237)
 CVE-2026-116175 (vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerabi ...)
-	TODO: check
+	- vllm <itp> (bug #1095237)
 CVE-2026-116174 (vLLM from 0.22.0 before 0.24.0 contains an improper input validation v ...)
-	TODO: check
+	- vllm <itp> (bug #1095237)
 CVE-2026-116173 (vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerabil ...)
-	TODO: check
+	- vllm <itp> (bug #1095237)
 CVE-2026-116172 (vLLM from 0.22.0 before 0.24.0 contains an improper input validation v ...)
-	TODO: check
+	- vllm <itp> (bug #1095237)
 CVE-2026-116171 (SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylis ...)
 	NOT-FOR-US: SiYuan
 CVE-2026-116170 (SiYuan before v3.8.7 contains an sql injection vulnerability that allo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4725d893910eb0284dd314e8f5de2aac5dcbc9c7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4725d893910eb0284dd314e8f5de2aac5dcbc9c7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/137476a1/attachment.htm>