{"action":"Upgrade vllm to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"vllm","cve_ids":["CVE-2025-46722"],"ecosystem":"PyPI","epss":0.00324,"exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-c65p-x677-fgj6","id":"tcs_01M5KGPN926ZFB55ZACCEF8FMS","modified_at":"2025-05-29T19:42:13.122057Z","published_at":"2025-05-29T17:15:21Z","references":["https://osv.dev/vulnerability/PYSEC-2025-43","https://github.com/vllm-project/vllm/security/advisories/GHSA-c65p-x677-fgj6","https://github.com/vllm-project/vllm/commit/99404f53c72965b41558aceb1bc2380875f5d848","https://github.com/vllm-project/vllm/pull/17378"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2025-43","url":"https://osv.dev/vulnerability/PYSEC-2025-43"}],"summary":"vLLM is an inference and serving engine for large language models (LLMs). In versions starting from 0.7.0 to before 0.9.0, in the file vllm/multimodal/hasher.py, the MultiModalHasher class has a secur"}