All vulnerabilities

Servers and applications

GHSA-gx7p-2j49-hfq4

DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)

Severity
High 7.5
Published
6 Oct 2026
Last changed
6 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
0.31.0
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
vLLMServers and applications · github:vllm-project/vllm
  • From 0.7.3 before 0.31.0

References