All vulnerabilities

Servers and applications

GHSA-9g3c-x747-c6wr

Quadratic Cohere2 Vision preprocessing DoS via request-controlled max_patches

Severity
Medium
Published
27 Oct 2026
Last changed
27 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
0.31.0
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
vLLMServers and applications · github:vllm-project/vllm
  • From 0.10.1 before 0.31.0

References