PyPI/vllm CVE-2026-7141: unknown, EPSS 0.48%
A vulnerability was found in vllm up to 0.19.0. The affected element is the function has_mamba_layers of the file vllm/v1/kv_cache_interface.py of the component KV Block Handler. Performing a manipula
Action: Upgrade vllm to 0.19.1 or later.
pip install vllm==0.19.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.19.1 | - |
Fixed versions
| 0.19.1 |
Sources
- osv: PYSEC-2026-2306
- https://vuldb.com/submit/801297
- https://vuldb.com/vuln/359740
- https://github.com/vllm-project/vllm/issues/39146
- https://github.com/vllm-project/vllm/issues/39146#issue-4215090365
- https://vuldb.com/vuln/359740/cti
- https://github.com/AjAnubolu/vllm/commit/1ad67864c0c20f167929e64c875f5c28e1aad9fd
- https://github.com/vllm-project/vllm/pull/39283
- https://github.com/advisories/GHSA-x368-4g9h-fvv4
CVE-2026-7141 · published · modified · JSON