PyPI/vllm CVE-2026-34755: medium 6.5, EPSS 0.46%
vLLM is an inference and serving engine for large language models (LLMs). From 0.7.0 to before 0.19.0, the VideoMediaIO.load_base64() method at vllm/multimodal/media/video.py splits video/jpeg data UR
Action: Upgrade vllm to 0.19.0 or later.
pip install vllm==0.19.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.7.0 | 0.19.0 | - |
Fixed versions
| 0.19.0 |
Sources
CVE-2026-34755 · published · modified · JSON