CVE-2025-48943 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

vLLM is an inference and serving engine for large language models (LLMs). Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service (ReDoS) that causes t…
Medium CVSS: 6.5

CVE-2025-48943

vLLM is an inference and serving engine for large language models (LLMs). Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service (ReDoS) that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to GHSA-6qc9-v4r8-22xg/CVE-2025-48942, but for regex instead of a JSON schema. Version 0.9.0 fixes the issue.
Vendor
Vllm
Product
Vllm
CWE
CWE-248
Yayın Tarihi
2025-05-30 19:15:30
Güncelleme
2025-06-24 17:40:52
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-248 Vllm MEDIUM Vllm 2025

Referanslar

https://github.com/vllm-project/vllm/commit/08bf7840780980c7568c573c70a6a8db94fd45ff https://github.com/vllm-project/vllm/issues/17313 https://github.com/vllm-project/vllm/pull/17623 https://github.com/vllm-project/vllm/security/advisories/GHSA-9hcf-v7m4-6m2j