{"action":"Upgrade vllm to 0.13.0 or later.","affected":[{"fixed":"0.13.0","introduced":"0.10.2"}],"component":"vllm","cve_ids":["CVE-2026-56340"],"ecosystem":"PyPI","epss":0.00644,"exploited":false,"fixed_versions":["0.13.0"],"ghsa_id":"GHSA-mcmc-2m55-j8jj","id":"tcs_01M5KFQVW2YT0ZX3NKARPYCKDV","modified_at":"2026-09-11T19:30:05.031389969Z","published_at":"2026-01-08T21:47:43Z","references":["https://osv.dev/vulnerability/GHSA-mcmc-2m55-j8jj","https://github.com/vllm-project/vllm/security/advisories/GHSA-mcmc-2m55-j8jj","https://github.com/vllm-project/vllm/pull/30649","https://access.redhat.com/security/cve/CVE-2026-56340","https://bugzilla.redhat.com/show_bug.cgi?id=2491060","https://github.com/pypa/advisory-database/tree/main/vulns/vllm/PYSEC-2026-250.yaml","https://github.com/vllm-project/vllm","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56340.json","https://www.vulncheck.com/advisories/vllm-denial-of-service-via-unvalidated-multimodal-embeddings"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-mcmc-2m55-j8jj","url":"https://osv.dev/vulnerability/GHSA-mcmc-2m55-j8jj"}],"summary":"vLLM introduced enhanced protection for CVE-2025-62164"}