CVE-2026-7141
2 advisories.
PyPI/vllm CVE-2026-7141: medium 5.6
vLLM makes Use of Uninitialized Resource
Action: Upgrade vllm to 0.19.1 or later.
pip install vllm==0.19.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.19.1 | - |
Fixed versions
| 0.19.1 |
Sources
- osv: GHSA-x368-4g9h-fvv4
- https://nvd.nist.gov/vuln/detail/CVE-2026-7141
- https://github.com/vllm-project/vllm/issues/39146
- https://github.com/vllm-project/vllm/issues/39146#issue-4215090365
- https://github.com/vllm-project/vllm/pull/39283
- https://github.com/AjAnubolu/vllm/commit/1ad67864c0c20f167929e64c875f5c28e1aad9fd
- https://vuldb.com/submit/801297
- https://vuldb.com/vuln/359740
- https://vuldb.com/vuln/359740/cti
CVE-2026-7141 · published · modified · JSON
PyPI/vllm CVE-2026-7141: unknown
A vulnerability was found in vllm up to 0.19.0. The affected element is the function has_mamba_layers of the file vllm/v1/kv_cache_interface.py of the component KV Block Handler. Performing a manipula
Action: Upgrade vllm to 0.19.1 or later.
pip install vllm==0.19.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.19.1 | - |
Fixed versions
| 0.19.1 |
Sources
- osv: PYSEC-2026-2306
- https://vuldb.com/submit/801297
- https://vuldb.com/vuln/359740
- https://github.com/vllm-project/vllm/issues/39146
- https://github.com/vllm-project/vllm/issues/39146#issue-4215090365
- https://vuldb.com/vuln/359740/cti
- https://github.com/AjAnubolu/vllm/commit/1ad67864c0c20f167929e64c875f5c28e1aad9fd
- https://github.com/vllm-project/vllm/pull/39283
- https://github.com/advisories/GHSA-x368-4g9h-fvv4
CVE-2026-7141 · published · modified · JSON