Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-8768

Fixed upstream EPSS <1%CVSS 7.5

A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service.

Published 2024-09-17 · CVE record · OSV

Products: Red Hat Enterprise Linux AI (RHEL AI)

Fixed upstream

Ecosystem	Package	Fixed in
PyPI	vllm	0.5.5